What is GHSA-m6h7-g9xx-qhpj?

GHSA-m6h7-g9xx-qhpj is a security advisory published by GitHub Security Advisories with Low severity. A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1...

Which CVE IDs does GHSA-m6h7-g9xx-qhpj cover?

GHSA-m6h7-g9xx-qhpj covers the following CVE IDs: CVE-2026-14694. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m6h7-g9xx-qhpj?

GHSA-m6h7-g9xx-qhpj has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

GHSA-m6h7-g9xx-qhpjLowCVSS 6.3

A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1...

Vendor

GitHub Security Advisories

Published

July 5, 2026

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-14694 →

📋 Description

A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this issue is the function cancel_order of the file classes/Master.php of the component POST Parameter Handler. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2026-14694
https://github.com/lee945/cve/issues/5
https://vuldb.com/cve/CVE-2026-14694
https://vuldb.com/submit/846834
https://vuldb.com/vuln/376290
https://vuldb.com/vuln/376290/cti
https://www.sourcecodester.com
https://github.com/advisories/GHSA-m6h7-g9xx-qhpj