CVE-2021-38840

Name of the Vulnerable Software and Affected Versions Simple Water Refilling Station Management System version 1.0

Description SQL Injection can occur via the username parameter in the water refilling/classes/Login.php file. This issue allows for potential SQL injection attacks.

Recommendations For Simple Water Refilling Station Management System version 1.0, consider disabling the username parameter in the water refilling/classes/Login.php file until a patch is available. Restrict access to the Login.php file to minimize the risk of exploitation. Avoid using the username parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.