CVE-2026-3792 | SourceCodester Sales and Inventory System 1.0 GET Parameter purchase_invoice.php purchaseid sql injection

A vulnerability labeled as critical has been found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchase_invoice.php of the component GET Parameter Handler. The manipulation of the argument purchaseid results in sql injection.

This vulnerability was named CVE-2026-3792. The attack may be performed from remote. In addition, an exploit is available.