Lucene search
China National Vulnerability DatabaseCNVD-2023-40908HistoryMay 18, 2023 - 12:00 a.m.
Pharmacy Management System SQL Injection Vulnerability
2023-05-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
pharmacy management system
sql injection
vulnerability
multilingual
login_core.php
illegal commands
sensitive data
database
0.002 Low
EPSS
Percentile
54.3%
Pharmacy Management System (MPMS) is a multilingual pharmacy management system. A SQL injection vulnerability exists in Pharmacy Management System v1.0, which originates from the email parameter in login_core.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pharmacy management system pharmacy management system v | eq | 1.0 |
Related
prion
prion
Sql injection
2023-05-16 15:15:00
cvelist
cvelist
CVE-2023-31519
2023-05-16 00:00:00
nvd
nvd
CVE-2023-31519
2023-05-16 15:15:09
cve
cve
CVE-2023-31519
2023-05-16 15:15:09