PHPGurukul Dairy Farm Shop Management System Time-Based Blind SQL Injection Vulnerability

A time-based blind SQL injection vulnerability exists in PHPGurukul Dairy Farm Shop Management System version 1.3. The issue is located in the manage-companies.php file, where remote attackers can execute arbitrary SQL code by manipulating the companyname parameter in a POST request.

Impact

Exploitation of this vulnerability allows for time-based blind SQL injection, where an attacker can execute arbitrary SQL commands on the database. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.