Yitaa1

**Name of the Vulnerable Software and Affected Versions** SourceCodester Pet Grooming Management Software version 1.0 **Description** A vulnerability exists in SourceCodester Pet Grooming Management Software that allows for SQL injection. The issue is related to the processing of the `/admin/search product.php` file and manipulation of the `group id` argument. This can be exploited remotely. The exploit is publicly available. **Recommendations** As a temporary workaround, restrict access to the `/admin/search product.php` file. Sanitize the `group id` argument before processing it in the `/admin/search product.php` file.

**Name of the Vulnerable Software and Affected Versions** Campcodes Online Shopping Portal version 1.0 **Description** A critical issue was found in the software, affecting an unknown functionality of the file /admin/edit-products.php. The manipulation of the `Category` argument leads to SQL injection. This issue can be exploited remotely. **Recommendations** For Campcodes Online Shopping Portal version 1.0, consider restricting access to the /admin/edit-products.php file until a patch is available. As a temporary workaround, avoid using the `Category` argument in the affected functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Campcodes Online Shopping Portal version 1.0 **Description** A critical issue was found in the software, affecting some unknown functionality of the file /admin/insert-product.php. The manipulation of the `Category` argument leads to SQL injection. The attack can be launched remotely. **Recommendations** For version 1.0, consider restricting access to the /admin/insert-product.php file and avoid using the `Category` argument until a fix is available. As a temporary workaround, restrict the use of the affected functionality to minimize the risk of exploitation.