Threats tagged 'ghsa-6q89-p8ww-gjxm'

SourceCodester Survey Application System 1.0 contains a SQL injection vulnerability in the save_user/update_user function within the /LoginRegistration.php file. The vulnerability arises from improper handling of the fullname argument, allowing remote attackers to manipulate SQL queries. Exploit code has been published, increasing the risk of exploitation. No patch or fix information is currently available.