SQL Injection Vulnerability in SourceCodester Home Owners Collection Management System

Summary

A critical SQL injection vulnerability exists in the Home Owners Collection Management System (version 1.0) developed by SourceCodester. This vulnerability is triggered through the 'delete_category' function located in the /classes/Master.php file. When an attacker manipulates the 'id' parameter of this function, they can execute arbitrary SQL commands that could lead to unauthorized access or manipulation of the database. This vulnerability can be exploited remotely, posing a significant risk to the security and confidentiality of sensitive data managed by the application. Given its public disclosure, it is essential for users and administrators to take immediate action to secure their systems.

References