CVE-2026-3790Disclosure(ahsanriaz26gmailcom / sales_and_inventory_system)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file check_supplier_details.php of the component POST Parameter Handler. Executing a manipulation of the argument stock_name1 can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

ahsanriaz26gmailcom CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-CheckSupplierDetails-stockname1.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sales_and_inventory_system

Threat summary

6 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 3 classified signals
General: 3 classified signals
Peaked 1d ago at 5 mentions (2026-03-09); latest day: 1
6 total mentions across 2 days

Affected systems

Vendors

ahsanriaz26gmailcom

Products

sales_and_inventory_system

1 version affected across 1 product

Deep dive

Activity timeline6 mentions / 2d

Signal classification2 categories

Disclosure

350.0%

General

350.0%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-09	5	Disclosure3General2
2026-03-10	1	General1

Full discourse6 posts

Vulmon Vulnerability Feed@VulmonFeeds213d
Disclosure
CVE-2026-3790 SQL Injection in SourceCodester Sales and Inventory System 1.0 via... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3790 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
A brief notification announcing a SQL Injection vulnerability (CVE-2026-3790) in SourceCodester Sales and Inventory System 1.0, with a link to detailed alert information.
0001078
4.0K followersView on X
CVEarity@CVEarity212d
General
⚡ New CVE Alert: CVE-2026-3790 📊 Severity: 6.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3790 #CVE-2026-3790 #CVE #Medium #CyberSecurity #InfoSec https://t.co/Za5vhirZWr
Post summary
The tweet simply announces CVE‑2026‑3790 with a medium severity rating and unspecified product impact, providing no technical depth or mitigation information.
0000019
93 followersView on X
Infoflowcloud@infoflowcloud212d
Disclosure
🚨*CVE* CVE-2026-3790 A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file check_supplier_details.ph… https://www.cve.org/CVERecord?id=CVE-2026-3790 ----- Traducción: Se ha encontrado … http://infoflow.cloud`
Post summary
A brief announcement of CVE-2026-3790 affecting SourceCodester Sales and Inventory System 1.0, noting an unspecified flaw in check_supplier_details but providing no further technical or exploit details.
0000029
56 followersView on X
CVE@CVEnew212d
Disclosure
CVE-2026-3790 A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file check_supplier_details.ph… https://www.cve.org/CVERecord?id=CVE-2026-3790
Post summary
A CVE (CVE-2026-3790) has been reported for a flaw in the file check_supplier_details.ph of SourceCodester Sales and Inventory System 1.0.
00000161
56.6K followersView on X
RedPacket Security@RedPacketSec213d
General
CVE Alert: CVE-2026-3790 - SourceCodester - Sales and Inventory System - https://www.redpacketsecurity.com/cve-alert-cve-2026-3790-sourcecodester-sales-and-inventory-system/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3790 #sourcecodester #sales-and-inventory-system
Post summary
The tweet is a brief CVE alert for CVE-2026-3790 affecting SourceCodester Sales and Inventory System, linking to an external page but offering no detailed information.
0000083
3.5K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash213d
General
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3790 - SourceCodester Sales and Inventory System POST Parameter check_supplier_details.php sql injection Intel Report: https://ift.tt/g45iWTo
Post summary
The alert highlights CVE-2026-3790 as a SQL injection in SourceCodester’s check_supplier_details.php, but provides no PoC, exploit code, evidence of active exploitation, or patch information.
0000041
347 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ahsanriaz26gmailcom	sales_and_inventory_system	1.0	-	-

Explore more

Back to dashboard ahsanriaz26gmailcom CVEs sales_and_inventory_system vulnerabilities

What researchers are saying

CVE-2026-3790

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A brief notification announcing a SQL Injection vulnerability (CVE-2026-3790) in SourceCodester Sales and Inventory System 1.0, with a link to detailed alert information.

CVEarity@CVEarityGeneral

The tweet simply announces CVE‑2026‑3790 with a medium severity rating and unspecified product impact, providing no technical depth or mitigation information.

Infoflowcloud@infoflowcloudDisclosure

A brief announcement of CVE-2026-3790 affecting SourceCodester Sales and Inventory System 1.0, noting an unspecified flaw in check_supplier_details but providing no further technical or exploit details.

CVE@CVEnewDisclosure

A CVE (CVE-2026-3790) has been reported for a flaw in the file check_supplier_details.ph of SourceCodester Sales and Inventory System 1.0.

RedPacket Security@RedPacketSecGeneral

The tweet is a brief CVE alert for CVE-2026-3790 affecting SourceCodester Sales and Inventory System, linking to an external page but offering no detailed information.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashGeneral

The alert highlights CVE-2026-3790 as a SQL injection in SourceCodester’s check_supplier_details.php, but provides no PoC, exploit code, evidence of active exploitation, or patch information.