Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-92406

SourceCodester Inventory and Monitoring System btn_functions.php add sql injection

Description

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btn_functions.php?action=add. Performing a manipulation of the argument difficulty_id results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SourceCodester Inventory and Monitoring System

  • 1.0affected

References