CVE-2026-4779 | SourceCodester Sales and Inventory System 1.0 HTTP GET Parameter update_customer_details.php sid sql injection

A vulnerability labeled as critical has been found in SourceCodester Sales and Inventory System 1.0. This issue affects some unknown processing of the file update_customer_details.php of the component HTTP GET Parameter Handler. Such manipulation of the argument sid leads to sql injection.

This vulnerability is documented as CVE-2026-4779. The attack can be executed remotely. Additionally, an exploit exists.