Hu Faxiang

**Name of the Vulnerable Software and Affected Versions** SourceCodester Lost and Found Information System version 1.0 **Description** A critical issue was found in the SourceCodester Lost and Found Information System. The problem affects an unknown function of the file adminusermanage user.php. The manipulation of the `id` argument leads to SQL injection. It is possible to launch the attack remotely. **Recommendations** For SourceCodester Lost and Found Information System version 1.0, consider restricting access to the `manage user.php` file until a patch is available. As a temporary workaround, avoid using the `id` argument in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Lost and Found Information System version 1.0 **Description** A critical issue has been found in the system, affecting an unknown functionality of the file admininquiriesview inquiry.php. This issue leads to sql injection and can be exploited remotely. The manipulation of this issue allows for potential data compromise. **Recommendations** For SourceCodester Lost and Found Information System version 1.0, consider restricting access to the admininquiriesview inquiry.php file until a patch is available. As a temporary workaround, avoid using any functionality that may trigger sql injection in this file. At the moment, there is no information about a newer version that contains a fix for this issue.