Pharmacy Management System getproductreport.php SQL Injection Vulnerability

Pharmacy Management System (MPMS) is a multilingual pharmacy management system from the personal developer Mayuri K. A SQL injection vulnerability exists in Pharmacy Management System v1.0, which stems from the getproductreport.php startDate parameter in getproductreport.php lacks validation for external input SQL statements. An attacker could use the vulnerability to execute illegal SQL commands to steal sensitive database data.