Threats tagged 'ghsa-wxwh-h954-4mmg'

A SQL injection vulnerability exists in itsourcecode Online File Management System 1.0 in the processing of the Username parameter in /ajax.php?action=login. This flaw allows remote attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification. The vulnerability has a high severity score of 7.3 and public exploit code is available.