CVE-2026-3793 | SourceCodester Sales and Inventory System 1.0 GET Parameter sales_invoice1.php sellid sql injection

A vulnerability marked as critical has been reported in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code of the file sales_invoice1.php of the component GET Parameter Handler. This manipulation of the argument sellid causes sql injection.

The identification of this vulnerability is CVE-2026-3793. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.