Cpe:2.3:a:sourcecodester:performance_indicator_system:1.0:*:*:*:*:*:*:*

SourceCodester Performance Indicator System 1.0 contains an unauthenticated SQL injection vulnerability via the prodcategory parameter, allowing remote attackers to execute arbitrary SQL queries.