Threats tagged 'ghsa-m83v-rwh2-8cwf'

A SQL injection vulnerability exists in code-projects Blog Site 1.0 within the category_exists function of /resources/functions/blog.php. This flaw allows remote attackers with low privileges to manipulate input parameters leading to unauthorized database queries. Multiple endpoints are affected. The vulnerability has a medium severity score of 6.3 and public exploit details are available.