Threats tagged 'ghsa-g3pw-7xrc-hwcv'

SourceCodester Performance Indicator System version 1.0 contains a SQL injection vulnerability in the /opils/staff/adddealer.php file. The vulnerability arises from improper handling of the 'Contact' argument, allowing remote attackers to manipulate SQL queries. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a medium severity. Exploit code has been publicly disclosed, but there are no confirmed reports of exploitation in the wild. No official patch or remediation guidance is currently available.