Description
A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_client of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | Multi-Vendor Online Grocery Management System | 1.0 | — |
References
- VDB-376291 | SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection vdb-entry technical-description
- VDB-376291 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-14695 | CVE Analysis and Report third-party-advisory
- Submit #846835 | SourceCodester Multi-Vendor Online Grocery Management System 1.0 SQL Injection third-party-advisory
- https://github.com/lee945/cve/issues/6 exploit issue-tracking
- https://www.sourcecodester.com/ product