544413218

**Name of the Vulnerable Software and Affected Versions** itsourcecode Inventory Management System version 1.0 **Description** A security issue has been identified in itsourcecode Inventory Management System version 1.0. The issue involves a SQL injection vulnerability present in an unknown function within the file `/admin/user/index.php?view=edit`. Manipulation of the `ID` parameter can trigger this vulnerability, allowing for remote attacks. The exploit for this issue has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CodeAstro Gym Management System version 1.0 **Description** A flaw exists in CodeAstro Gym Management System version 1.0 where manipulation of the `id/ini weight` argument in the file '/admin/update-progress.php' can lead to SQL injection. This issue can be exploited remotely. The exploit is publicly available. The affected functionality is currently unknown. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.