ZeroDay Findings
Sign inSign up

Findings

CVE-2026-3754

A vulnerability was found in SourceCodester Sales and Inventory System 1.0.

Published Mar 8, 2026 · updated Jun 17, 2026 · ahsanriaz26gmailcom sales and inventory system

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /add_stock.php. Performing a manipulation of the argument cost results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 8, 2026 · NIST NVD

    Detected

    A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /add_stock.php. Performing a manipulation of the argument cost results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /add_stock.php. Performing a manipulation of the argument cost results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

Affected

  • cpe ahsanriaz26gmailcom/sales and inventory system1.0

Sources

  • NIST NVDVulnerability recordCVE-2026-3754

    A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /add_stock.php. Performing a manipulation of the argument cost results in sql injection. The attack can be initiated remotely. The exploit has been made public

    nvd.nist.gov

References