phpBMS v0.96 SQL Injection Vulnerabilities
Multiple SQL injection vulnerabilities exist in phpBMS v0.96 due to improper sanitization of user-supplied input. An attacker can exploit these vulnerabilities to gain access to sensitive information such as login credentials, passwords, etc. The first vulnerability exists in the 'invoices_discount_ajax.php' script, where the 'id' parameter is not properly sanitized before being used in a SQL query. An attacker can exploit this vulnerability by sending a specially crafted HTTP request containing malicious SQL statements. The second vulnerability exists in the 'dbgraphic.php' script, where the 'f', 'mf', 't', and 'r' parameters are not properly sanitized before being used in a SQL query. An attacker can exploit this vulnerability by sending a specially crafted HTTP request containing malicious SQL statements. The third vulnerability exists in the 'advancedsearch.php' script, where the 'tid' and 'base' parameters are not properly sanitized before being used in a SQL query. An attacker can exploit this vulnerability by sending a specially crafted HTTP request containing malicious SQL statements.
