Findings

CVE-2026-4780

A vulnerability was detected in SourceCodester Sales and Inventory System 1.0.

Published Mar 25, 2026 · updated Jun 17, 2026 · ahsanriaz26gmailcom sales and inventory system

A vulnerability was detected in SourceCodester Sales and Inventory System 1.0. Impacted is an unknown function of the file update_out_standing.php of the component HTTP GET Parameter Handler. Performing a manipulation of the argument sid results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 25, 2026 · NIST NVD

    Detected

    A vulnerability was detected in SourceCodester Sales and Inventory System 1.0. Impacted is an unknown function of the file update_out_standing.php of the component HTTP GET Parameter Handler. Performing a manipulation of the argument sid results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A vulnerability was detected in SourceCodester Sales and Inventory System 1.0. Impacted is an unknown function of the file update_out_standing.php of the component HTTP GET Parameter Handler. Performing a manipulation of the argument sid results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Affected

  • cpe ahsanriaz26gmailcom/sales and inventory system1.0

Sources

  • CVE.orgVulnerability recordCVE-2026-4780

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-4780

    A vulnerability was detected in SourceCodester Sales and Inventory System 1.0. Impacted is an unknown function of the file update_out_standing.php of the component HTTP GET Parameter Handler. Performing a manipulation of the argument sid results in sql injection. The attack is po

    nvd.nist.gov

References