SourceCodester Performance Indicator System vulnerabilities

A security flaw was found in SourceCodester Performance Indicator System 1.0 affecting /opils/staff/save_profile.php. Manipulating the Contact argument leads to SQL injection. The attack can be launched remotely and a public exploit is available.

A vulnerability was identified in SourceCodester Performance Indicator System 1.0 affecting /opils/staff/edit_dealer.php. Manipulating the Contact argument leads to SQL injection. The attack can be initiated remotely and the exploit is publicly available.

A vulnerability was found in SourceCodester Performance Indicator System 1.0 affecting the file /opils/staff/adddealer.php. Manipulating the Contact argument leads to SQL injection. The attack can be launched remotely and a public exploit exists.

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. An unknown function of the file /opils/admin/deleteproduct.php is vulnerable to SQL injection through manipulation of the ID argument. The attack can be performed remotely, and the exploit is publicly available.

SourceCodester Performance Indicator System 1.0 contains a SQL injection vulnerability in the file /opils/staff/sales_history.php. Manipulation of the ID argument leads to SQL injection. The attack can be performed remotely, and the exploit has been publicly released.

SourceCodester Performance Indicator System 1.0 contains a SQL injection vulnerability in the file /opils/staff/edit_credit.php. Manipulation of the credit argument leads to SQL injection. The attack can be performed remotely, and the exploit has been publicly released.

A SQL injection vulnerability was identified in SourceCodester Performance Indicator System 1.0 in the file /opils/staff/product.php. Manipulation of the Category argument allows remote attack. The exploit is publicly available.

A SQL injection vulnerability was found in SourceCodester Performance Indicator System 1.0 in the file /opils/staff/edit_quantity.php. Manipulation of the pqty argument allows remote attack. The exploit has been publicly disclosed.

A SQL injection vulnerability was identified in SourceCodester Performance Indicator System 1.0 in the file /opils/admin/addproduct.php. Manipulation of the prodcategory argument allows remote attack. The exploit has been made public.