CVE-2026-3791Disclosure(ahsanriaz26gmailcom / sales_and_inventory_system)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been found in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file dashboard.php of the component Search. The manipulation of the argument searchtxt leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

ahsanriaz26gmailcom CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-Dashboard-searchtxt.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sales_and_inventory_system

Threat summary

5 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 1d ago at 4 mentions (2026-03-09); latest day: 1
5 total mentions across 2 days

Affected systems

Vendors

ahsanriaz26gmailcom

Products

sales_and_inventory_system

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 2d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-09	4	Disclosure3General1
2026-03-10	1	Disclosure1

Full discourse5 posts

CVEarity@CVEarity211d
Disclosure
⚡ New CVE Alert: CVE-2026-3791 📊 Severity: 6.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3791 #CVE-2026-3791 #CVE #Medium #CyberSecurity #InfoSec https://t.co/0ouJZM17gx
Post summary
The tweet announces CVE-2026-3791, a medium‑severity vulnerability affecting multiple products, but provides no proof‑of‑concept, exploit, or patch information.
0000018
93 followersView on X
Infoflowcloud@infoflowcloud212d
Disclosure
🚨*CVE* CVE-2026-3791 A vulnerability has been found in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file dashboard.php of the c… https://www.cve.org/CVERecord?id=CVE-2026-3791 ----- Traducción: CVE-2026-3791 Se … http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-3791 for SourceCodester Sales and Inventory System 1.0, noting a vulnerable file but contains no technical details, PoC, or evidence of exploitation.
0000029
56 followersView on X
CVE@CVEnew212d
Disclosure
CVE-2026-3791 A vulnerability has been found in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file dashboard.php of the c… https://www.cve.org/CVERecord?id=CVE-2026-3791
Post summary
The text reports the discovery of CVE-2026-3791 affecting SourceCodester Sales and Inventory System 1.0, noting an unknown issue in dashboard.php, but provides no PoC, exploit, patch, or details on active exploitation.
00000153
56.6K followersView on X
RedPacket Security@RedPacketSec212d
Disclosure
CVE Alert: CVE-2026-3791 - SourceCodester - Sales and Inventory System - https://www.redpacketsecurity.com/cve-alert-cve-2026-3791-sourcecodester-sales-and-inventory-system/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3791 #sourcecodester #sales-and-inventory-system
Post summary
The post announces CVE‑2026‑3791 affecting SourceCodester’s Sales and Inventory System, linking to a CVE‑alert page but offering no PoC, exploit details, patch, or technical specifics.
0000088
3.5K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash213d
General
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3791 - SourceCodester Sales and Inventory System Search dashboard.php sql injection Intel Report: https://ift.tt/376BeIi
Post summary
The post identifies CVE-2026-3791 as an SQL injection in SourceCodester Sales and Inventory System but offers no PoC, exploit details, or mitigation information.
0000040
347 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ahsanriaz26gmailcom	sales_and_inventory_system	1.0	-	-

Explore more

Back to dashboard ahsanriaz26gmailcom CVEs sales_and_inventory_system vulnerabilities

What researchers are saying

CVE-2026-3791

CVEarity@CVEarityDisclosure

The tweet announces CVE-2026-3791, a medium‑severity vulnerability affecting multiple products, but provides no proof‑of‑concept, exploit, or patch information.

Infoflowcloud@infoflowcloudDisclosure

The tweet announces CVE-2026-3791 for SourceCodester Sales and Inventory System 1.0, noting a vulnerable file but contains no technical details, PoC, or evidence of exploitation.

CVE@CVEnewDisclosure

The text reports the discovery of CVE-2026-3791 affecting SourceCodester Sales and Inventory System 1.0, noting an unknown issue in dashboard.php, but provides no PoC, exploit, patch, or details on active exploitation.

RedPacket Security@RedPacketSecDisclosure

The post announces CVE‑2026‑3791 affecting SourceCodester’s Sales and Inventory System, linking to a CVE‑alert page but offering no PoC, exploit details, patch, or technical specifics.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashGeneral

The post identifies CVE-2026-3791 as an SQL injection in SourceCodester Sales and Inventory System but offers no PoC, exploit details, or mitigation information.