Tailoring Management System SQL注入漏洞

Tailoring Management System is itsourcecode open source tailoring management system. A SQL injection vulnerability exists in Tailoring Management System version 1.0, which originates from a SQL injection vulnerability in the id/inccat/desc/date/amount parameter of the /incedit.php page...

CVE-2024-7680: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /incedit.php?id=4. The manipulation of the argument id/inccat/desc/date/amount leads to sql injection. It is possible to initiate the attack...