Threats tagged 'ghsa-pfjm-67w3-fm53'

A SQL injection vulnerability exists in the addwishlist function of the Wishlist component in itsourcecode Online Medicine Delivery System 1.0. The vulnerability is triggered by manipulation of the proid argument in the /customer/controller.php?action=addwish file. This flaw allows remote attackers with low privileges to potentially impact confidentiality, integrity, and availability of the system. The vulnerability has a CVSS 3.1 base score of 6.3, indicating medium severity.