CVE-2021-36624

The CVE describes a remote SQL injection in Sourcecodester Phone Shop Sales Managements System v1.0 that enables authentication bypass. Affected component: the PHP-based login/authentication logic; root cause: SQL injection in authentication flow. Impact per sources ranges to partial/full confide...