Threats tagged 'ghsa-3wpr-g54v-cr6j'

SourceCodester AC Repair and Services System 1.0 contains a critical SQL injection vulnerability in the save_users function within /classes/Users.php. The vulnerability arises from improper handling of the ID argument, allowing remote attackers to execute SQL injection attacks. Public exploit code has been disclosed, increasing the risk of exploitation. No specific affected versions or patches are currently documented.