CVE-2020-35327

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the ref_no (POST) parameter to admin_class.php > MITRE Terms of Use apply – see LICENSE‑MITRE.txt