CVE-2024-36568

Name of the Vulnerable Software and Affected Versions Sourcecodester Gas Agency Management System version 1.0

Description The issue is related to SQL Injection, which can be exploited via the "/gasmark/editbrand.php?id=" endpoint. The id variable is vulnerable to injection attacks.

Recommendations For Sourcecodester Gas Agency Management System version 1.0, consider validating and sanitizing user input for the id variable in the "/gasmark/editbrand.php" endpoint to prevent SQL Injection attacks. As a temporary workaround, restrict access to the "/gasmark/editbrand.php" endpoint until a patch is available.