CVE-2026-92406
HighCVSS 7.3Summary
A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btn_functions.php?action=add. Manipulation of the difficulty_id argument results in SQL injection. Remote exploitation is possible, and the exploit is now public and may be used.
Risk Assessment
The SQL injection vulnerability may allow an attacker to read, modify, or delete database data and potentially escalate further within the system. The public availability of the exploit increases the risk of rapid exploitation.
Recommendation
Upgrade SourceCodester Inventory and Monitoring System to a patched version or apply SQL query parameterization and input validation. Restrict access to the administrative panel.
Other vulnerabilities in SourceCodester Inventory and Monitoring System
Original NVD description (English source)
A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btn_functions.php?action=add. Performing a manipulation of the argument difficulty_id results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS