critical9.8
CVE-2021-40908
SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands…
Impact
SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Purchase Order Management System Project | Purchase Order Management System | Version 1.0 |