CVE-2023-2130

A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

CVE-2023-2130

SourceCodester Purchase Order Management System 1.0 contains a SQL injection in the /admin/suppliers/view_details.php endpoint (GET parameter id). The root cause is unsafely handling the id parameter, enabling an attacker to inject arbitrary SQL and potentially access or manipulate data. Exploita...