VULNERABILITY INTELLIGENCE

CVE-2020-28133

CVSS score9.8 CRITICAL

EPSS probability2.11%

CISA KEVNot currently listed

Published2020-11-17

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in sales_inventory/login.php.

Weakness classification

nvd@nist.gov: CWE-89

Primary references

cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
cve@mitre.org — Product
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Product