CVE-2025-9702: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. This affects an unknown function of the file /salesreport.php. The manipulation of the argument month leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...

CVE-2024-42561: Improper Neutralization of Special Elements used in an SQL Command

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...

CVE-2024-42561

The Pharmacy Management System (commit a2efc8 ) is vulnerable to a SQL injection flaw. The vulnerability exists in the invoice_number parameter of the sales_report.php endpoint, where improper neutralization of special elements allows for unauthorized database interaction. Practical impact includ...