FeMiner WMS SQL Injection Vulnerability in inquire_storage_item.php

A SQL injection vulnerability has been identified in FeMiner WMS version 1.0. This vulnerability allows remote attackers to access sensitive information by injecting malicious SQL into the 'itemid' parameter of the 'inquire_storage_item.php' file.

Impact

Exploitation of this vulnerability allows for SQL injection, which could lead to unauthorized data access or manipulation in the application's database.

Reproduction

The vulnerability can be reproduced by sending a crafted request to 'inquire_storage_item.php' with an injected SQL payload in the 'itemid' parameter. This can be done using a tool like SQLMap, targeting a local instance of the application.