SourceCodester Stock Management System SQL Injection Vulnerability in Purchase Order Details Page

A critical SQL injection vulnerability has been identified in the SourceCodester Stock Management System version 1.0. The issue arises in the Purchase Order Details Page, specifically within the admin panel's purchase order view. The vulnerability allows remote attackers to manipulate the ID argument, leading to unauthorized database access or manipulation.

Impact

Exploitation of this vulnerability allows for SQL injection, which could be used to interfere with the application's database queries. This might include retrieving, modifying, or deleting database information. In some cases, SQL injection can lead to executing arbitrary code on the server.