CVE-2022-28023

CVE-2022-28023 affects Purchase Order Management System v1.0. The vulnerability is a SQL injection in the endpoint /purchase_order/classes/Master.php?f=delete_supplier, allowing potentially arbitrary SQL execution. The CVSS metrics in the initial entry indicate a high/critical impact (C/I/A CONFI...