Threats tagged 'ghsa-cfjq-p9cp-c745'

SourceCodester Farm Management System 1.0 contains a SQL injection vulnerability in an unknown function within the /review.php file. This flaw allows remote attackers with low privileges to manipulate the 'pid' argument, potentially leading to unauthorized access or modification of data. The vulnerability has a medium severity rating with a CVSS score of 6.3. Public exploit code is available, but no confirmed exploitation in the wild has been reported. No patch or remediation information is currently provided.