NetSight
critical9.8

CVE-2020-24197

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username …

Impact

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter.

Affected products

VendorProductAffected versions
Stock Management System ProjectStock Management System
Version 1.0

Weakness classification

References