CVE-2020-28133

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Grocery Store Sales And Inventory System version 1.0

Description An issue was discovered in the web login functionality, allowing authentication bypass. This enables an attacker to gain client privileges via SQL injection in the sales inventory/login.php file.

Recommendations For version 1.0, consider disabling the login functionality in sales inventory/login.php until a patch is available to prevent SQL injection attacks. Restrict access to the sales inventory/login.php file to minimize the risk of exploitation. Avoid using the login functionality in the affected version until the issue is resolved.