CVE-2026-26890

CVE-2026-26890 refers to a SQL Injection vulnerability in Sourcecodester Pharmacy Point of Sale System v1.0, exploitable via /pharmacy/manage_product.php. Multiple connected sources (NVD, Red Hat, CIRCL, CVE lists, EUVD, AttackersKB, etc.) consistently describe the issue as a SQL injection affect...

CVE-2026-26890

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manageproduct.php...

CVE-2023-1857

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/?page=product/manageproduct=2. The manipulation of the argument Product Name leads to cross site scripting. The...

Simple Online Bidding System 跨站请求伪造漏洞

Simple Online Bidding System is an online bidding system by oretnom23 individual developers. A cross-site request forgery vulnerability exists in Simple Online Bidding System version 1.0, which originates from a cross-site request forgery in the saveproduct function of the...

PT-2024-33471 · Sourcecodester · Sourcecodester Simple Online Bidding System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /simple-online-bidding-system/admin/index.php?page=manage product. The...

PT-2023-18374 · Campcodes · Campcodes Coffee Shop Pos System

Name of the Vulnerable Software and Affected Versions: Campcodes Coffee Shop POS System version 1.0 Description: A critical issue has been found in the system, affecting the file /admin/products/manage product.php. The manipulation of the id argument leads to SQL injection. This issue can be...

CVE-2023-1983

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

CVE-2022-44859

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manageproduct.php...

CVE-2022-32364

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/manageproduct&id=...

Badminton Center Management System SQL注入漏洞

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records. Badminton Center Management System version v1.0 is vulnerable to S...