CVE-2026-10235

MediumCVSS 6.3

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

A SQL injection vulnerability was found in CodeAstro Ingredients Stock Management System 1.0 in the file /Ingredients-Stock/stock_manager.php via the txt_search_category argument. The attack can be performed remotely, and the exploit is publicly available.

Risk Assessment

An attacker can execute arbitrary SQL queries against the database, potentially leading to data theft, modification, or full application compromise.

Recommendation

Apply a security fix immediately, such as input validation and using parameterized SQL queries.

Other vulnerabilities in CodeAstro Ingredients Stock Management System

CVE-2026-11495Medium
SQL injection vulnerability in /Ingredients-Stock/add_stock.php of CodeAstro Ingredients Stock Management System 1.0 via the ID argument allows remote SQL injection.

Original NVD description (English source)

A flaw has been found in CodeAstro Ingredients Stock Management System 1.0. This vulnerability affects unknown code of the file /Ingredients-Stock/stock_manager.php. This manipulation of the argument txt_search_category causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS