Threats tagged 'ghsa-357h-9gq8-42jr'

A SQL injection vulnerability exists in itsourcecode Inventory Management System 1.0 in the /admin/user/index.php?view=edit endpoint via manipulation of the ID parameter. This vulnerability allows remote attackers to execute unauthorized SQL commands. Public exploit code has been disclosed. The vulnerability has a high severity with a CVSS score of 7.3.