Threats tagged 'ghsa-vrw9-fr97-gwvw'

CodeAstro Simple Inventory System 1.0 contains a SQL injection vulnerability in the Login component's /index.php file. Manipulating the Username argument can allow remote attackers to execute unauthorized SQL commands. The vulnerability has a high severity score of 7.3 and public exploit code has been disclosed.