SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the pid parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/74125
https://exchange.xforce.ibmcloud.com/vulnerabilities/74122