CVE-2026-6188: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=deletesales. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38238)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external input SQL statements in the /ajax.php?action=deletesales file’s parameters...