CVE-2026-4570: SourceCodester Sales and Inventory System HTTP POST Request view_customers.php sql injection
A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /viewcustomers.php of the component HTTP POST Request Handler. Such manipulation of the argument searchtxt leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4570?
CVE-2026-4570 has a high severity rating due to the potential for SQL injection exploits.
How do I fix CVE-2026-4570?
To fix CVE-2026-4570, update the SourceCodester Sales and Inventory System to the latest version that addresses SQL injection vulnerabilities.
What impact does CVE-2026-4570 have on my system?
CVE-2026-4570 can allow an attacker to manipulate SQL queries, potentially leading to unauthorized data access or data corruption.
Which software is affected by CVE-2026-4570?
CVE-2026-4570 specifically affects SourceCodester Sales and Inventory System version 1.0.
What component of the SourceCodester Sales and Inventory System is vulnerable in CVE-2026-4570?
The vulnerable component in CVE-2026-4570 is the HTTP POST Request Handler found in the /view_customers.php file.