PT-2022-19961 · Unknown · Insurance Management System

Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue allows for SQL Injection via the "/insurance/editAgent.php?agent id=" endpoint, where an attacker can manipulate the agent id variable to inject malicious SQL code. Recommendation...