VulnSocial

CVE-2026-3754Disclosure(ahsanriaz26gmailcom / sales_and_inventory_system)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /add_stock.php. Performing a manipulation of the argument cost results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

ahsanriaz26gmailcom CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • sales_and_inventory_system

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 4 classified signals
  • Peaked 1d ago at 2 mentions (2026-03-08); latest day: 2
  • 4 total mentions across 2 days

Affected systems

Vendors
ahsanriaz26gmailcom
Products
sales_and_inventory_system

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-03-08: 2Mentions · 2026-03-09: 2Technical Details · 2026-03-08: 1Technical Details · 2026-03-09: 103-0803-09
Signal classification1 categories
Disclosure
4100.0%
Referenced assets5 URLs
Full discourse4 posts
  • DailyCVE@dailycve
    Disclosure

    🟠 SourceCodester, SQL Injection, #CVE-2026-3754 (Medium) https://dailycve.com/sourcecodester-sql-injection-cve-2026-3754-medium/

    Post summary

    A medium‑severity SQL injection vulnerability (CVE‑2026‑3754) has been disclosed, but no proof of exploit, mitigation, or active exploitation details are provided.

    0000032
    166 followersView on X
  • RedPacket Security@RedPacketSec
    Disclosure

    CVE Alert: CVE-2026-3754 - SourceCodester - Sales and Inventory System - https://www.redpacketsecurity.com/cve-alert-cve-2026-3754-sourcecodester-sales-and-inventory-system/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3754 #sourcecodester #sales-and-inventory-system

    Post summary

    This social media post announces a CVE alert for CVE-2026-3754 affecting SourceCodester's Sales and Inventory System, providing a link to a detailed alert page.

    0000076
    3.5K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-3754 A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /add_stock.php. Performing a manipulation of th… https://www.cve.org/CVERecord?id=CVE-2026-3754

    Post summary

    CVE-2026-3754 is reported as a vulnerability in SourceCodester Sales and Inventory System 1.0, affecting an unknown function in /add_stock.php. No PoC, exploit, patch, or active exploitation details are provided.

    0000074
    56.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-3754 SQL Injection in SourceCodester Sales and Inventory System 1.0 via... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3754 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    Announcement of a new CVE-2026-3754 SQL injection vulnerability affecting SourceCodester Sales and Inventory System 1.0.

    0000039
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appahsanriaz26gmailcomsales_and_inventory_system1.0--

Explore more

Back to dashboardahsanriaz26gmailcom CVEssales_and_inventory_system vulnerabilities