CVE-2026-11495

MediumCVSS 6.3

Published: 08/06/2026(UTC)Updated: 08/06/2026(UTC)Translated: 09/06/2026(UTC)NVD NIST

Summary

A vulnerability was detected in CodeAstro Ingredients Stock Management System 1.0, affecting an unknown function of the file /Ingredients-Stock/add_stock.php. Manipulation of the argument ID results in SQL injection.

Risk Assessment

An attacker may remotely exploit this vulnerability, potentially leading to unauthorized access to the database.

Recommendation

It is recommended to update the system to the latest version and implement input validation to prevent SQL injection.

Original NVD description (English source)

A vulnerability was detected in CodeAstro Ingredients Stock Management System 1.0. This impacts an unknown function of the file /Ingredients-Stock/add_stock.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.