SourceCodester Inventory Management System edit_sell.php sql injection

CVE-2023-4182

Summary

A vulnerability has been identified in the SourceCodester Inventory Management System 1.0 that allows an attacker to exploit the file edit_sell.php. By manipulating the up_pid parameter, an attacker can execute SQL injection attacks remotely. This could lead to unauthorized access to the database, allowing potential data theft or manipulation. It is crucial for users of this system to assess their security measures and apply necessary updates to mitigate risks associated with this vulnerability.

References