Threats tagged 'ghsa-vx3q-r2qj-qr3q'

Campcodes Supplier Management System 1.0 contains a SQL injection vulnerability in the /manufacturer/confirm_order.php file. This flaw allows remote attackers to manipulate the ID parameter to execute unauthorized SQL commands. Public exploit code is available, increasing the risk of exploitation. The vulnerability has a high severity score of 7.3 (CVSS 3.1).