Threats tagged 'ghsa-cqrp-53g7-w3w8'

A SQL injection vulnerability exists in the Admin Login Handler component of Abdurrab5 online-makeup-store, specifically in the index.php file. The flaw allows remote attackers to manipulate the id/password arguments to execute SQL injection. The product uses a rolling release model, so specific affected versions are not available. Exploit code is publicly available, but no known active exploitation has been reported. The vulnerability has a medium severity rating with a CVSS score of 7.3.