Th3W0Lf

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical issue has been discovered, affecting the file "/sms/admin/?page=receiving/view receiving&id=1". The manipulation of the `id` argument leads to SQL injection. This issue can be exploited remotely. Recommendations: For SourceCodester/oretnom23 Stock Management System version 1.0, consider restricting access to the "/sms/admin/?page=receiving/view receiving&id=1" endpoint until a patch is available. Avoid using the `id` argument in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical issue affects the processing of the file "/admin/?page=return/view return". The manipulation of the `ID` argument leads to SQL injection. This issue can be exploited remotely. Recommendations: For SourceCodester/oretnom23 Stock Management System version 1.0, consider restricting access to the "/admin/?page=return/view return" endpoint until a patch is available. As a temporary workaround, avoid using the `ID` argument in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester/oretnom23 Stock Management System. The issue affects an unknown function of the file /admin/?page=sales/view sale, where the manipulation of the `ID` argument leads to SQL injection. This can be exploited remotely. Recommendations: For version 1.0, consider disabling access to the /admin/?page=sales/view sale endpoint until a patch is available. Restrict the use of the `ID` argument in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester/oretnom23 Stock Management System version 1.0 **Description** A critical issue has been found in the Stock Management System, affecting some unknown functionality of the file /admin/?page=back order/view bo. The manipulation of the `ID` argument leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For version 1.0, consider disabling access to the `/admin/?page=back order/view bo` endpoint until a patch is available. Restrict the manipulation of the `ID` argument to minimize the risk of SQL injection exploitation. Avoid using the `ID` argument in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester/oretnom23 Stock Management System version 1.0 **Description** A vulnerability has been found in the SourceCodester/oretnom23 Stock Management System, classified as problematic. This issue affects unknown code of the file /classes/Users.php?f=save, leading to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For version 1.0, consider disabling access to the /classes/Users.php?f=save file until a patch is available. Restrict access to this file to minimize the risk of exploitation. Avoid using this file in remote operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester/oretnom23 Stock Management System version 1.0 **Description** A critical issue affects the processing of the file /classes/Login.php?f=login, where the manipulation of the `Username` argument leads to SQL injection. The attack can be initiated remotely. **Recommendations** For SourceCodester/oretnom23 Stock Management System version 1.0, consider disabling the login functionality in the /classes/Login.php file until a patch is available to prevent SQL injection attacks. Restrict access to the `Username` argument in the affected API endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** SourceCodester/oretnom23 Stock Management System version 1.0 **Description** A critical vulnerability was found in the SourceCodester/oretnom23 Stock Management System. This affects an unknown part of the file /admin/?page=purchase order/view po of the component Purchase Order Details Page. The manipulation of the `ID` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. **Recommendations** As a temporary workaround, consider restricting access to the `/admin/?page=purchase order/view po` endpoint until a patch is available. Avoid using the `ID` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.