phpshe SQL Injection Vulnerability in Admin Brand Deletion Function

A critical SQL injection vulnerability has been identified in phpshe version 1.8. The issue arises in the admin.php file, specifically within the brand deletion function, where the brand_id[] parameter is manipulated. This vulnerability allows remote attackers to inject arbitrary SQL code, bypassing input validation and potentially leading to unauthorized database access, data manipulation, and full system compromise.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries. This could result in unauthorized access to the database, leakage or alteration of sensitive data, complete control over the system, and disruption of services.