CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_invoice_items.php?id= .
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')