Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

R_Vd_L

#25645of 53,633
9.8Total CVSS
Vulnerabilities · 1
PT-2022-12352
9.8
2022-01-28
Unknown · Sourcecodester Simple Cold Storage Management System · CVE-2021-45435
**Name of the Vulnerable Software and Affected Versions** Sourcecodester Simple Cold Storage Management System using PHP/OOP version 1.0 **Description** An SQL Injection issue exists via the `username` field in "login.php". This allows for potential exploitation. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** For Sourcecodester Simple Cold Storage Management System using PHP/OOP version 1.0, consider restricting access to the `login.php` file or validating and sanitizing the `username` field to prevent SQL injection attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.