Pharmacy Management System getsalereport.php SQL Injection Vulnerability

Pharmacy Management System (MPMS) is a multi-lingual pharmacy management system by Mayuri K. Personal developer. version v1.0 of Pharmacy Management System is vulnerable to SQL injection, which stems from the startDate parameter in getsalereport.php parameter in getsalereport.php lacks validation for external input SQL statements. An attacker could exploit the vulnerability to execute illegal SQL commands to steal sensitive database data.