CVE-2020-28133

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p81

Published

Nov 17, 2020 (Nov 17, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in sales_inventory/login.php.

Vendors: simple grocery store sales and inventory sales project
Products: simple grocery store sales and inventory system
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.