CVE-2026-92405
HighCVSS 7.3Summary
A SQL injection vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0, in an unknown function of /index.php via the Username argument. The attack can be launched remotely, and a public exploit is available.
Risk Assessment
An attacker could execute arbitrary SQL queries, risking data leakage, modification, or deletion. Given the public exploit, the likelihood of rapid exploitation is high.
Recommendation
Update or harden the application as soon as possible using parameterized queries and input validation. Consider temporarily restricting access to /index.php from untrusted networks.
Other vulnerabilities in SourceCodester Inventory and Monitoring System
Original NVD description (English source)
A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS