Tag
A remote attacker can perform SQL injection in the code-projects Vehicle Showroom Management System 1.0 by manipulating the BRANCH_ID argument in the /util/AddVehicleFunction.php file.