CVE-2026-76990— code-projects Simple Inventory System delete.php sql injection
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| code-projects | Simple Inventory System | 1.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-76990
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
code-projects Simple Inventory System delete.php sql injection
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file /delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| code-projects | Simple Inventory System | 1.0 | cpe:2.3:a:code-projects:simple_inventory_system:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-76990
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-76990
请登录查看更多情报信息。
News Coverage for CVE-2026-76990 (1)
Same Patch Batch · code-projects · 2026-08-20 · 3 CVEs total
| CVE-2026-76764 | 7.3 HIGH | code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection |
| CVE-2026-76799 | 5.3 MEDIUM | code-projects Login Registration System SQL Database Backup login_registration_system.sql |
IV. Related Vulnerabilities
Same product: Simple Inventory System
- CVE-2025-13280
CodeAstro Simple Inventory System Login index.php sql inject - CVE-2025-11611
SourceCodester Simple Inventory System user.php sql injectio - CVE-2025-11610
SourceCodester Simple Inventory System brand.php sql injecti - CVE-2024-5101
SourceCodester Simple Inventory System updateproduct.php sql - CVE-2024-5100
SourceCodester Simple Inventory System tableedit.php sql inj
Same vendor: code-projects
- CVE-2026-76799
code-projects Login Registration System SQL Database Backup - CVE-2026-76764
code-projects Employee Management System Admin Login Endpoin - CVE-2026-76762
code-projects Assessment Management welcome.php sql injectio - CVE-2026-76574
code-projects Hospital Information System User Login UsersCo - CVE-2026-75986
code-projects Online Job Portal System Password Recovery For
Same weakness: CWE-89
- CVE-2026-76904
GeoTools has unauthenticated SQL injection in the jsonArrayC - CVE-2026-76613
Joomla Extension - yootheme.com - Authenticated, privileged - CVE-2026-77392
SourceCodester Dynamic Input Field Generator Using HTML, CSS - CVE-2026-68782
Azure SQL Database Elevation of Privilege Vulnerability - CVE-2026-68789
Azure SQL Database Elevation of Privilege Vulnerability
V. Comments for CVE-2026-76990
No comments yet