CVE-2026-3792Disclosure(ahsanriaz26gmailcom / sales_and_inventory_system)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchase_invoice.php of the component GET Parameter Handler. The manipulation of the argument purchaseid results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

ahsanriaz26gmailcom CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-PurchaseInvoice-purchaseid.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sales_and_inventory_system

Threat summary

5 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 1d ago at 4 mentions (2026-03-09); latest day: 1
5 total mentions across 2 days

Affected systems

Vendors

ahsanriaz26gmailcom

Products

sales_and_inventory_system

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 2d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-09	4	Disclosure3General1
2026-03-10	1	Disclosure1

Full discourse5 posts

CVEarity@CVEarity214d
Disclosure
⚡ New CVE Alert: CVE-2026-3792 📊 Severity: 6.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3792 #CVE-2026-3792 #CVE #Medium #CyberSecurity #InfoSec https://t.co/YTvD7inred
Post summary
The tweet announces CVE-2026-3792 with a medium severity score of 6.3 and links to the NVD details, but provides no evidence of exploitation, PoC, or patch information.
0000019
93 followersView on X
Infoflowcloud@infoflowcloud215d
General
🚨*CVE* CVE-2026-3792 A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchase_invoice.php of the component GET Parameter… https://www.cve.org/CVERecord?id=CVE-2026-3792 ----- Traducción: CVE-2026-3792 Se … http://infoflow.cloud`
Post summary
The tweet mentions a new CVE and provides a link to the CVE record, but offers no additional technical information, PoC, exploit, or patch details.
0000029
56 followersView on X
CVE@CVEnew215d
Disclosure
CVE-2026-3792 A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchase_invoice.php of the component GET Parameter… https://www.cve.org/CVERecord?id=CVE-2026-3792
Post summary
A brief alert stating that CVE‑2026‑3792 was found in SourceCodester Sales and Inventory System 1.0, with no additional technical or mitigation details.
00000163
56.6K followersView on X
RedPacket Security@RedPacketSec215d
Disclosure
CVE Alert: CVE-2026-3792 - SourceCodester - Sales and Inventory System - https://www.redpacketsecurity.com/cve-alert-cve-2026-3792-sourcecodester-sales-and-inventory-system/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3792 #sourcecodester #sales-and-inventory-system
Post summary
The post announces CVE‑2026‑3792 affecting SourceCodester's Sales and Inventory System with a link to a CVE alert page, providing no further technical or exploitation details.
0000091
3.5K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds216d
Disclosure
CVE-2026-3792 SQL Injection in SourceCodester Sales and Inventory System 1.0 via purchaseid Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3792
Post summary
This post discloses an SQL injection vulnerability in SourceCodester Sales and Inventory System 1.0, specifically targeting the purchaseid parameter, and provides a link to a vulnerability details page for more information.
0000056
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ahsanriaz26gmailcom	sales_and_inventory_system	1.0	-	-

Explore more

Back to dashboard ahsanriaz26gmailcom CVEs sales_and_inventory_system vulnerabilities

What researchers are saying

CVE-2026-3792

CVEarity@CVEarityDisclosure

The tweet announces CVE-2026-3792 with a medium severity score of 6.3 and links to the NVD details, but provides no evidence of exploitation, PoC, or patch information.

Infoflowcloud@infoflowcloudGeneral

The tweet mentions a new CVE and provides a link to the CVE record, but offers no additional technical information, PoC, exploit, or patch details.

CVE@CVEnewDisclosure

A brief alert stating that CVE‑2026‑3792 was found in SourceCodester Sales and Inventory System 1.0, with no additional technical or mitigation details.

RedPacket Security@RedPacketSecDisclosure

The post announces CVE‑2026‑3792 affecting SourceCodester's Sales and Inventory System with a link to a CVE alert page, providing no further technical or exploitation details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

This post discloses an SQL injection vulnerability in SourceCodester Sales and Inventory System 1.0, specifically targeting the purchaseid parameter, and provides a link to a vulnerability details page for more information.