Threats tagged 'ghsa-vfwh-w29h-mwvr'

A SQL injection vulnerability exists in itsourcecode Inventory Management System 1.0 within the /admin/login.php file. Manipulation of the user_email argument can be exploited remotely to execute unauthorized SQL commands. The vulnerability has a high severity score of 7.3 and public exploit code has been disclosed.