Galaxy

**Name of the Vulnerable Software and Affected Versions** Tailoring Management System version 1.0 **Description** A critical issue was found in the Tailoring Management System, affecting the file customeradd.php. The manipulation of the `fullname`, `address`, `phonenumber`, `sex`, `email`, `city`, and `comment` arguments leads to SQL injection. This issue can be exploited remotely. **Recommendations** For Tailoring Management System version 1.0, consider restricting access to the customeradd.php file until a patch is available. As a temporary workaround, avoid using the vulnerable arguments `fullname`, `address`, `phonenumber`, `sex`, `email`, `city`, and `comment` in the affected file. At the moment, there is no information about a newer version that contains a fix for this issue.