Threats tagged 'ghsa-3vw4-6555-wh35'

A SQL injection vulnerability exists in itsourcecode Inventory Management System 1.0 in the /LogSignModal.PHP file via the U_USERNAME parameter. This flaw allows remote attackers to manipulate SQL queries, potentially leading to data confidentiality, integrity, and availability impacts. Public exploit code is available, and the vulnerability has a high severity rating with a CVSS score of 7.3.