SourceCodester Performance Indicator System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SourceCodester Performance Indicator System: 6 record(s), with affected versions and fixes.
CVE-2026-108968
High · 7.3
CWE-74 Oct 13, 2026
SourceCodester Performance Indicator System sales_history.php sql injection
A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/sales_history.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
CVE-2026-108967
High · 7.3
CWE-74 Oct 13, 2026
SourceCodester Performance Indicator System edit_credit.php sql injection
A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-108966
High · 7.3
CWE-74 Oct 13, 2026
SourceCodester Performance Indicator System product.php sql injection
A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
CVE-2026-108965
High · 7.3
CWE-74 Oct 13, 2026
SourceCodester Performance Indicator System edit_quantity.php sql injection
A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-108964
High · 7.3
CWE-74 Oct 13, 2026
SourceCodester Performance Indicator System addproduct.php sql injection
A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
CVE-2026-105957
Medium · 6.3
CWE-74 Oct 6, 2026
SourceCodester Performance Indicator System view_product.php sql injection
A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/view_product.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.