A Blind SQL injection issue in ajax.php in GaatiTrack Courier Management System 1.0 allows an unauthenticated attacker to inject a payload via the email parameter during login.
- http://packetstormsecurity.com/files/176030
No PoCs found on GitHub currently.