Summary
This host is running PHP inventory and is prone to SQL injection vulnerability.
Impact
Successful exploitation will allow remote attackers to include arbitrary HTML or web scripts in the scope of the browser and allows to obtain and manipulate sensitive information.
Impact Level: Application
Solution
Upgrade to PHP Inventory version 1.3.2 or later
For updates refer to http://www.phpwares.com/content/php-inventory
Insight
The flaw is due to an input passed the to 'user' and 'pass' form field in 'index.php' is not properly sanitised before being used in an SQL query.
Affected
PHP Inventory version 1.3.1
References
