Sourcecodester Multi Vendor Online Grocery Management System
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Sourcecodester Multi Vendor Online Grocery Management System.
By the Year
In 2026 there have been 6 vulnerabilities in Sourcecodester Multi Vendor Online Grocery Management System with an average score of 6.5 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 6 | 6.48 |
It may take a day or so for new Multi Vendor Online Grocery Management System vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Sourcecodester Multi Vendor Online Grocery Management System Security Vulnerabilities
SQLi in SourceCodester Multi-Vendor Grocery Sys 1.0 Registration Handler
CVE-2026-14695
7.3 - High
- July 05, 2026
A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_client of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
SQL Injection
SQLi via POST cancel_order in SourceCodester Multi-Vendor Grocery 1.0
CVE-2026-14694
6.3 - Medium
- July 05, 2026
A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this issue is the function cancel_order of the file classes/Master.php of the component POST Parameter Handler. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
SQL Injection
SourceCodester Multi-Vendor Grocery MS 1.0: Remote Imp. Auth via cancel_order
CVE-2026-14693
5.4 - Medium
- July 05, 2026
A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancel_order of the file classes/Master.php. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been published and may be used.
AuthZ
SQLi in POST Parameter Handler SourceCodester MVOGMS 1.0 (5.7.26) Remote
CVE-2026-14692
6.3 - Medium
- July 05, 2026
A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function save_shop_type of the file classes/Master.php of the component POST Parameter Handler. Performing a manipulation results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
SQL Injection
Code Inject CVE-2026-14691 in SrcCodester Multi-Vendor Grocery Sys 1.0 SetHandler
CVE-2026-14691
6.3 - Medium
- July 05, 2026
A security vulnerability has been detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This impacts the function update_settings_info of the file classes/SystemSettings.php of the component Setting Handler. Such manipulation of the argument content[] leads to code injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Code Injection
Improper Auth in SourceCodester Multi-Vendor Online Grocery Mgmt 1.0 via Users.php
CVE-2026-14690
7.3 - High
- July 05, 2026
A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_users of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
AuthZ
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Sourcecodester Multi Vendor Online Grocery Management System or by Sourcecodester? Click the Watch button to subscribe.
