CVE-2026-79845: code-projects Simple Inventory System edit.php sql injection
A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability affects unknown code of the file /InventoryManagement/edit.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The issue can be exploited remotely and does not require privileges or user interaction, according to the supplied CVSS vector. An attacker would need to send a crafted value for the ID argument to /InventoryManagement/edit.php.
Is exploit code available?
Yes. The vulnerability information states that a public exploit is available and might be used.
Which version is identified as affected?
The affected product version identified in the available data is code-projects Simple Inventory System 1.0.