Simple Crud Using Php And Fpdf
Monthly
SQL injection in SourceCodester Simple CRUD using PHP and FPDF 1.0 lets remote attackers manipulate the firstname field in app/register.php to alter SQL queries and potentially read or modify application data. The independent assessment scores the issue as network-reachable with low complexity and no user interaction, while the upstream CVSS 4.0 vector records PR:L; that inconsistency means the exact privilege requirement is not confirmed. A public PoC reference exists, but it is not verified as working exploit code, and no CISA KEV entry indicates active exploitation; the vuln.today priority label is this_month.
SQL injection in SourceCodester Simple CRUD using PHP and FPDF 1.0 lets remote attackers manipulate the firstname field in app/register.php to alter SQL queries and potentially read or modify application data. The independent assessment scores the issue as network-reachable with low complexity and no user interaction, while the upstream CVSS 4.0 vector records PR:L; that inconsistency means the exact privilege requirement is not confirmed. A public PoC reference exists, but it is not verified as working exploit code, and no CISA KEV entry indicates active exploitation; the vuln.today priority label is this_month.