Description

A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/edit_manufacturer.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Related CPE's

a

anisha

supply_chain_management

1.0

Vulnerable

References

https://code-projects.org/

Product

https://github.com/mengcehn/CVE/edit/main/Supply-Chain-Management-in-php-sql.md

Permissions Required

https://vuldb.com/?ctiid.278826

Permissions Required

https://vuldb.com/?id.278826

Third Party Advisory

https://vuldb.com/?submit.413337

Third Party Advisory

Weaknesses

[email protected]

Primary
CWE-89

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2024-09-29T03:15:02.357

1 week ago

Last modified

2024-10-02T13:32:17.277

6 days ago