Threats tagged 'ghsa-qm5g-9237-pg9r'

SourceCodester SUP Online Shopping 1.0 contains a SQL injection vulnerability in the /admin/replymsg.php file via the msgid parameter. This flaw allows remote attackers to manipulate SQL queries, potentially leading to data disclosure, modification, or denial of service. Public exploit code is available, increasing the risk of exploitation. The vulnerability has a high severity rating with a CVSS score of 7.3.