CVE-2026-76990— code-projects Simple Inventory System delete.php sql injection
Quick assessment
Affected
code-projects Simple Inventory System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 code-projects Simple Inventory System 1.0 中发现了一个漏洞。受此问题影响的是文件 /delete.php 的某些未知功能。对参数 ID 的此类操纵可导致 SQL 注入。该漏洞可通过远程方式发起攻击。该漏洞已被公开披露，且可能被利用。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| code-projects | Simple Inventory System | 1.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-76990
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
code-projects Simple Inventory System delete.php sql injection
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file /delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| code-projects | Simple Inventory System | 1.0 |
cpe:2.3:a:code-projects:simple_inventory_system:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-76990
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-76990
请登录查看更多情报信息。
News Coverage for CVE-2026-76990 (1)
Same Patch Batch · code-projects · 2026-08-20 · 3 CVEs total
| CVE-2026-76764 | 7.3 HIGH | code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection |
| CVE-2026-76799 | 5.3 MEDIUM | code-projects Login Registration System SQL Database Backup login_registration_system.sql |
IV. Related Vulnerabilities
Same product: Simple Inventory System
-
CVE-2025-13280
CodeAstro Simple Inventory System Login index.php sql inject -
CVE-2025-11611
SourceCodester Simple Inventory System user.php sql injectio -
CVE-2025-11610
SourceCodester Simple Inventory System brand.php sql injecti -
CVE-2024-5101
SourceCodester Simple Inventory System updateproduct.php sql -
CVE-2024-5100
SourceCodester Simple Inventory System tableedit.php sql inj
Same vendor: code-projects
-
CVE-2026-78144
code-projects Barangay Resident Profiling Management System -
CVE-2026-78143
code-projects Barangay Resident Profiling Management System -
CVE-2026-78142
code-projects Barangay Resident Profiling Management System -
CVE-2026-76799
code-projects Login Registration System SQL Database Backup -
CVE-2026-76764
code-projects Employee Management System Admin Login Endpoin
Same weakness: CWE-89
-
CVE-2026-78201
itsourcecode Payroll System admin_class.php login sql inject -
CVE-2026-78200
itsourcecode Library Management System editbooks.php sql inj -
CVE-2026-78199
SourceCodester Simple Online Food Ordering System view_prod. -
CVE-2026-78198
SourceCodester Simple Online Food Ordering System ajax.php a -
CVE-2026-78197
SourceCodester Simple Online Food Ordering System ajax.php s
V. Comments for CVE-2026-76990
No comments yet