CVE-2023-2672: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file items/view.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch th...

PT-2021-14369

Name of the Vulnerable Software and Affected Versions: Online Invoicing System OIS version 4.0 Description: The issue is related to a stored XSS in the Online Invoicing System, which can allow an attacker to take over the admin account. This is achieved through a payload that extracts a csrf toke...