Xuzijie

**Name of the Vulnerable Software and Affected Versions** SourceCodester Shopping Website version 1.0 **Description** A critical issue has been found, affecting an unknown function of the file index.php. The manipulation of the `username` argument leads to sql injection, allowing remote attacks. The exploit has been disclosed publicly. **Recommendations** For SourceCodester Shopping Website version 1.0, consider disabling the affected function in index.php or restricting access to it until a patch is available. Avoid using the `username` argument in the affected area until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.