PT-2025-35441 · Unknown+1 · Sourcecodester+1
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Campcodes/SourceCodester Courier Management System version 1.0
Description
A SQL injection issue exists in the
Login function of the /ajax.php file. Manipulation of the email argument can lead to SQL injection. The issue is remotely exploitable and has been publicly disclosed.Recommendations
As a temporary workaround, consider restricting access to the
/ajax.php file until a fix is available.
Sanitize the email input parameter to prevent SQL injection attacks.Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Best Courier Management System
Sourcecodester