Threats tagged 'ghsa-wjcq-wr5r-854c'

SourceCodester Computer Repair Shop Management System 1.0 contains a SQL injection vulnerability in the /classes/Master.php?f=delete_product endpoint. The vulnerability allows remote attackers to manipulate the ID parameter, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS score of 7.3, indicating a medium severity level. No patch or official remediation has been provided yet. Public exploit details have been disclosed, but no known exploitation in the wild has been reported.