White9Ash

**Name of the Vulnerable Software and Affected Versions** itsourcecode Sales and Inventory System version 1.0 **Description** A SQL injection issue exists due to improper processing of the `/pages/emp edit.php` endpoint. A remote attacker can exploit this by manipulating the `ID` argument to execute unauthorized database queries. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** itsourcecode Sales and Inventory System version 1.0 **Description** A security flaw allows remote attackers to perform SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. The issue exists in the `/pages/emp del.php` endpoint through the manipulation of the `ID` variable. **Recommendations** As a temporary workaround, restrict access to the `/pages/emp del.php` file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.