Threats tagged 'ghsa-f46x-7cm8-vxx8'

A SQL injection vulnerability exists in itsourcecode Inventory Management System 1.0 within the /admin/products/index.php?view=add file. The vulnerability is triggered by manipulation of the PROMODEL argument and can be exploited remotely. Public exploit code has been disclosed. The vulnerability has a medium severity rating with a CVSS score of 4.7.