Pharmacy Management System getOrderReport.php SQL Injection Vulnerability

Pharmacy Management System (MPMS) is a multilingual pharmacy management system from the personal developer Mayuri K. A SQL injection vulnerability exists in Pharmacy Management System v1.0, which stems from the getOrderReport.php startDate parameter in getOrderReport.php lacks validation for external input SQL statements. An attacker can exploit the vulnerability to execute illegal SQL commands to steal sensitive database data.