Threats tagged 'ghsa-7xmv-xm4j-88mj'

A SQL injection vulnerability exists in the itsourcecode COVID Tracking System 1.0 within the /admin/?page=city endpoint. This flaw allows remote attackers with low privileges to manipulate the ID parameter, potentially leading to unauthorized data access and modification. The vulnerability has a medium severity rating and public exploit code is available.