Zhanghw

**Name of the Vulnerable Software and Affected Versions** SourceCodester Simple Inventory System version 1.0 **Description** A security flaw exists due to the manipulation of the `editBrandName` argument in the processing of the file '/brand.php', leading to a SQL injection. The attack can be executed remotely. The exploit has been released publicly. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Simple Inventory System version 1.0 **Description** A flaw exists in SourceCodester Simple Inventory System 1.0. The issue involves the manipulation of the `uemail` argument within an unknown function of the /user.php file, leading to a SQL injection condition. This allows for remote exploitation. The exploit is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** itsourcecode Open Source Job Portal version 1.0 **Description** A security flaw exists in itsourcecode Open Source Job Portal version 1.0 that allows for SQL injection. The issue is triggered by manipulating the `ID` argument in the file '/jobportal/admin/company/index.php?view=edit'. The attack can be initiated remotely. The exploit has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.