Onlycmjb

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/view product.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

**Name of the Vulnerable Software and Affected Versions** SourceCodester College Notes Gallery Management System version 1.0 **Description** An unrestricted upload issue exists within the Profile Upload component in the file `/dashboard/userprofile.php`. A remote attacker can manipulate the `image` argument to upload arbitrary files to the system. **Recommendations** Restrict access to the `/dashboard/userprofile.php` file or the Profile Upload component until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Faculty Clearance System version 1.0 **Description** An issue exists in the `/delete requirement.php` endpoint where the manipulation of the `ID` argument allows for SQL injection. This flaw enables a remote attacker to interfere with the database queries of the application. **Recommendations** Update SourceCodester Online Faculty Clearance System version 1.0 to a patched version. As a temporary mitigation, restrict access to the `/delete requirement.php` file.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Faculty Clearance System version 1.0 **Description** An issue exists in the `/update requirement status.php` endpoint where manipulation of the `haydi` variable allows for remote SQL injection. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** Update SourceCodester Online Faculty Clearance System version 1.0 to a version that contains a fix for this issue. As a temporary workaround, restrict access to the `/update requirement status.php` file to minimize the risk of exploitation.