CVE-2021-25202

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

PT-2021-16454

Name of the Vulnerable Software and Affected Versions: SourceCodester Sales and Inventory System version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the id parameter to the "/ahira/admin/inventory.php" API endpoint. Recommendations:...

CVE-2021-25202: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...