Simple Client Management System SQL注入漏洞（CNVD-2022-57769）

Simple Client Management System is a simple client management system from Carlo Montero’s personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which stems from a lack of validation of external SQL statements in /cms/admin/?page= invoice/manage_invoice&id= lacks validation of external input SQL statements, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data.