Vulnerabilities CVE-2026-14694

CVE-2026-14694

Medium

Open

TLP:CLEAR

SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php cancel_order sql injection

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this issue is the function cancel_order of the file classes/Master.php of the component POST Parameter Handler. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Details

CVSS Score: 5.3
EPSS Score ⓘ: 0.20%

10.1th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Confidence: 90%
Published: Jul 5, 2026
Last Modified: Jul 5, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.