Skip to content
Threat Feed

Product

Simple POS and Inventory System 1.0

1 brief RSS
high threat

SourceCodester Simple POS and Inventory System SQL Injection Vulnerability (CVE-2026-9447)

A SQL injection vulnerability (CVE-2026-9447) exists in SourceCodester Simple POS and Inventory System 1.0, allowing remote attackers to execute arbitrary SQL commands by manipulating the 'Name' argument in the /user/search.php file.

exploited Simple POS and Inventory System 1.0 sql-injection cve-2026-9447 web-application
2r 1t 1c