Acc3Pt

**Nome do Software Vulnerável e Versões Afetadas** itsourcecode Sales and Inventory System versão 1.0 **Description** Uma injeção de SQL remota é possível devido ao manuseio inadequado da variável `ID` no endpoint '/pages/sup del.php?type=supplier'. SQL injection é uma técnica onde um invasor insere código SQL malicioso em uma consulta, permitindo a manipulação do banco de dados. **Recommendations** Atualize o itsourcecode Sales and Inventory System versão 1.0 para uma versão corrigida. Como medida paliativa temporária, restrinja o acesso ao endpoint '/pages/sup del.php?type=supplier'.

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /pages/us del.php?type=user. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/cust transac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.