Tomato0O

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functionality of the file /edit class1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Class and Exam Timetabling System version 1.0 **Description** A remote SQL injection exists in the `/preview3.php` endpoint. This occurs when the `course year section` argument is manipulated, allowing an attacker to interfere with the database queries. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `course year section` parameter in the `/preview3.php` endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** CodeAstro Ingredients Stock Management System version 1.0 **Description** A SQL injection flaw exists in the `/Ingredients-Stock/stock manager.php` file. This issue occurs when the `txt search category` argument is manipulated, allowing a remote attacker to execute arbitrary SQL commands. **Recommendations** As a temporary mitigation, restrict access to the `/Ingredients-Stock/stock manager.php` file or avoid using the `txt search category` parameter until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.