High severity · published Jul 5, 2026
CVE-2026-14695
SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection
7.3
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_client of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MO
Multi-Vendor Online Grocery Management System · SourceCodester
1.0 · source: vendor
Affected product
MO
Multi-Vendor Online Grocery Management System
SourceCodester
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-14695
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-14695
github.com
https://github.com/lee945/cve/issues/6
vuldb.com
https://vuldb.com/cve/CVE-2026-14695
vuldb.com
https://vuldb.com/submit/846835
vuldb.com
https://vuldb.com/vuln/376291
vuldb.com
https://vuldb.com/vuln/376291/cti
www.sourcecodester.com
https://www.sourcecodester.com/
More from Multi-Vendor Online Grocery Management System
7.3
CVE-2026-14690
SourceCodester Multi-Vendor Online Grocery Management System Users.php save_users improper authorization
6.3
CVE-2026-14694
SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php cancel_order sql injection
6.3
CVE-2026-14692
SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php save_shop_type sql injection
6.3
CVE-2026-14691
SourceCodester Multi-Vendor Online Grocery Management System Setting SystemSettings.php update_settings_info code injection
5.4
CVE-2026-14693
SourceCodester Multi-Vendor Online Grocery Management System Master.php cancel_order improper authorization