Xinyang Li

**Name of the Vulnerable Software and Affected Versions** SourceCodester Stock Management System version 1.0 **Description** An issue exists in the processing of the '/classes/Master.php?f=delete supplier' endpoint. Remote manipulation of the `ID` parameter allows for SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. **Recommendations** Update SourceCodester Stock Management System version 1.0 to a version that contains a fix for this issue. As a temporary mitigation, restrict access to the '/classes/Master.php?f=delete supplier' endpoint or avoid using the `ID` parameter within that file.

**Name of the Vulnerable Software and Affected Versions** chetans9 core-php-admin-panel versions up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f **Description** A flaw in the processing of the file `/Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php` allows for a remote attack. By manipulating the `filter col` argument, an attacker can perform SQL injection, which is a technique used to interfere with the queries that an application makes to its database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the file `/Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php` or avoid using the `filter col` argument.