Wangfuyuan

**Name of the Vulnerable Software and Affected Versions** SourceCodester Simple and Nice Shopping Cart Script version 1.0 **Description** An SQL injection issue exists in the Admin Login component within the `/admin/login.php` endpoint. The flaw allows remote attackers to manipulate the `Username` variable to execute arbitrary SQL commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Simple and Nice Shopping Cart Script version 1.0 **Description** An issue exists in the `/admin/mensproductdeletequery.php` file where improper handling of the `user id` variable allows for SQL injection. This allows a remote attacker to manipulate database queries via the affected parameter. **Recommendations** Update SourceCodester Simple and Nice Shopping Cart Script version 1.0 to a version that contains a fix. As a temporary mitigation, restrict access to the `/admin/mensproductdeletequery.php` file.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Simple and Nice Shopping Cart Script version 1.0 **Description** An issue exists in the `/admin/girlsproductdeletequery.php` file where improper handling of the `user id` variable allows for remote SQL injection. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to manipulate the database. **Recommendations** Avoid using the `user id` parameter in the `/admin/girlsproductdeletequery.php` endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.