CVE-2026-4570Disclosure(ahsanriaz26gmailcom / sales_and_inventory_system)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /view_customers.php of the component HTTP POST Request Handler. Such manipulation of the argument searchtxt leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • sales_and_inventory_system

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-03-23); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Products
sales_and_inventory_system

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-23: 2Mentions · 2026-03-24: 1Technical Details · 2026-03-23: 103-2303-24
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-232
Disclosure2
2026-03-241
General1
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-4570 SQL Injection in SourceCodester Sales and Inventory System 1.0 via POST Request https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4570

    Post summary

    The snippet lists CVE-2026‑4570 as a SQL injection vulnerability in SourceCodester Sales and Inventory System 1.0, with no PoC, exploit, or patch information provided.

    0001055
    4.0K followersView on X
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-4570 📊 Severity: 6.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4570 #CVE-2026-4570 #CVE #Medium  #CyberSecurity #InfoSec https://t.co/1gLU7O7UKp

    Post summary

    The tweet merely announces CVE-2026-4570 with a medium score and generic impact, without any exploitation or remediation details.

    0000018
    111 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-4570 A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /view_customers.php of the component HTTP P… https://www.cve.org/CVERecord?id=CVE-2026-4570

    Post summary

    The entry reports the discovery of CVE-2026-4570 affecting SourceCodester Sales and Inventory System 1.0, but provides only a brief reference to the affected file without detailed technical data, PoC, or mitigation information.

    0000077
    56.8K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appahsanriaz26gmailcomsales_and_inventory_system1.0--

Explore more