SQL Injection in Grocery Management System Registration

A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_client of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Casky was already ahead

This CVE exploits attack patterns that Casky's 322matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

CVE-2026-14695 is a critical SQL injection vulnerability in SourceCodester Multi-Vendor Online Grocery Management System version 1.0, specifically in the user registration handler within the save_client function of classes/Users.php. The vulnerability allows attackers to inject malicious SQL code through the Name parameter, bypassing input validation and potentially compromising the entire database. This affects any organization running this grocery management platform, exposing sensitive customer data, payment information, and inventory records to unauthorized access or manipulation. With a CVSS score of 7.3 and publicly disclosed exploit code available, this vulnerability poses an immediate and significant risk to small and medium-sized grocery retailers and their customers.

Casky.ai's 322 mapped security skills leverage Claude AI's extended reasoning to detect the attack patterns underlying this vulnerability by correlating MITRE ATT&CK techniques TA0001 (Initial Access) and TA0043 (Reconnaissance). Practitioners using Casky would observe detection patterns for CWE-74 (Improper Neutralization of Special Elements) and CWE-89 (SQL Injection) manifesting as suspicious registration requests with SQL metacharacters in name fields, anomalous database query structures, and attempts to extract system information through UNION-based injection payloads. The platform would flag authentication bypass attempts through the compromised registration function, unusual database access patterns following injection attempts, and reconnaissance queries probing database schema—enabling security teams to identify exploitation in real-time before data exfiltration occurs.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

322 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-14695.

Abuse of Public-Facing API: Mobile API Abuse

mobile security · low

Run

abusing-dpapi-for-credential-access

red teaming · high

Run

abusing-shadow-credentials-for-privesc

red teaming · high

Run

MITRE ATT&CK Techniques

TA0001 TA0043

Investigate the attack patterns behind CVE-2026-14695

Casky has 322 skills that investigate the attack patterns behind CVE-2026-14695. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn