CVE-2026-4570 — A vulnerability was identified in SourceCodester Sales and Inventory System 1.0.…
Image via opengraph.githubassets.com
🚨 CVE-2026-4570 A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /viewcustomers.php of the component HTTP POST Request Handler. Such manipulation of the argument searchtxt leads to sql injection. The attack can be executed
Web-Security-PoCs/Inventory-System/SQLi-ViewCustomers-searchtxt.md at main · meifukun/Web-Security-PoCs
github.com
What This Means For You
- New vulnerability disclosed — verify if your stack is exposed.
Related ATT&CK Techniques
Indicators of Compromise
| ID | Type | Indicator |
|---|---|---|
| CVE-2026-4570 | SQLi | SourceCodester Sales and Inventory System 1.0, file: /view_customers.php, component: HTTP POST Request Handler, vulnerable parameter: searchtxt |
🛠 Recommended Tools
🤖
SCW Elite Bot
Get IOC packs, detection rules & premium threat intel — pay with Telegram Stars ⭐
Open Bot →
Source & Attribution
| Source Platform | Telegram |
| Channel | CVE Notify |
| Channel ID | 1129491012 |
| Message ID | 158320 |
| Published | April 07, 2026 at 20:56 UTC |
| Original Link | https://github.com/meifukun/Web-Security-PoCs/blob/main/I... |
This content was curated and summarized by Shimi's Cyber World for informational purposes. It is not copied or republished in full. All intellectual property rights remain with the original author and source.
Believe this infringes your rights? Submit a takedown request.
Found this interesting? Follow us to stay ahead.
Share