Description
A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file invoices.php. The manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHPGurukul | Dairy Farm Shop Management System | 1.3 | — |
References
- VDB-316291 | PHPGurukul Dairy Farm Shop Management System invoices.php sql injection vdb-entry technical-description
- VDB-316291 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #615232 | PHPGurukul Dairy Farm Shop Management System 1.3 SQL Injection third-party-advisory
- https://github.com/f1rstb100d/myCVE/issues/138 exploit issue-tracking
- https://phpgurukul.com/ product