Complaint Management System SQL Injection Vulnerability (CNVD-2023-29364)

Complaint Management System is an open source Php project . Used to request a complaint through the online service . Complaint Management System v1.0 version of the SQL injection vulnerability, the vulnerability stems from the component POST Parameter Handler file/users/check_availability.php to the parameter email missing validation of external input SQL statements. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.