CVE-2026-4572 | SourceCodester Sales and Inventory System 1.0 HTTP POST Request /view_product.php searchtxt sql injection

March 22, 2026 Yanac

A vulnerability classified as critical was found in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /view_product.php of the component HTTP POST Request Handler. Executing a manipulation of the argument searchtxt can lead to sql injection.

This vulnerability appears as CVE-2026-4572. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More