PT-2024-19504

Name of the Vulnerable Software and Affected Versions Complete Supplier Management System version 1.0 Description The issue is related to SQL Injection via the "/Supply Management System/admin/edit category.php" endpoint, specifically through the id parameter. This allows for potential...

CVE-2024-22625

Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /SupplyManagementSystem/admin/editcategory.php?id=...

CVE-2024-22626

CVE-2024-22626 affects the Complete Supplier Management System v1.0. The vulnerability is a SQL Injection in the endpoint /Supply_Management_System/admin/edit_retailer.php?id=, allowing potentially arbitrary SQL execution. Reported impact and details indicate a high-severity issue (CVSS 7.2, HIGH...