TMS Application Home Page Search SQL Injection Vulnerability

The TMS application is vulnerable to a time-based blind SQL injection flaw in the search function on its home page.

The vulnerability is triggered through the pattern parameter, allowing an attacker to exploit the search feature to perform time-based blind SQL injection.