Sanc

**Name of the Vulnerable Software and Affected Versions** SourceCodester Canteen Management System (affected versions not specified) **Description** A critical issue affects the function query of the file ajax invoice.php of the component POST Request Handler. The manipulation of the argument `search` leads to sql injection. The attack may be initiated remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Canteen Management System (affected versions not specified) **Description** A problem was found in the SourceCodester Canteen Management System. This issue affects the `builtin echo` function of the file `youthappam/brand.php`. The manipulation of the `brand name` argument leads to cross-site scripting. The attack may be initiated remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.