Threats tagged 'ghsa-5jwg-6jjq-4x9g'

A SQL injection vulnerability exists in SourceCodester Interview Management System up to version 1.0 in the /addCandidate.php file via the candName parameter. This flaw allows remote attackers with low privileges to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability. Public exploit code is available. The vulnerability has a CVSS 3.1 score of 6.3 (medium severity). No patch or remediation information is currently provided.