Lucene search
+L

82 matches found

Positive Technologies
Positive Technologies
•added 2025/08/13 12:00 a.m.•21 views

PT-2025-33097 · Code Projects · Medical Store Management System

Name of the Vulnerable Software and Affected Versions: code-projects Medical Store Management System version 1.0 Description: A vulnerability was identified in code-projects Medical Store Management System 1.0, affecting an unknown part of the file UpdateMedicines.java within the Update Medicines...

8.8CVSS6.7AI score0.00407EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2025/08/13 12:00 a.m.•17 views

Code-Projects Medical Store Management System 注入漏洞

Medical Store Management System is a pharmacy management system. Medical Store Management System has a SQL injection vulnerability that originates from improper filtering of searchTxt parameters in the MainPanel.java file, which can be exploited by an attacker to obtain sensitive information...

8.8CVSS7.8AI score0.00407EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/08/13 12:00 a.m.•16 views

Code-Projects Medical Store Management System 注入漏洞

Medical Store Management System is a pharmacy management system. Medical Store Management System suffers from a SQL injection vulnerability that originates from a misuse of the parameter productNameTxt in the file UpdateMedicines.java resulting in a SQL injection attack, which can be exploited by...

8.8CVSS7.7AI score0.00407EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/13 12:00 a.m.•9 views

CVE-2025-8929: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Medical Store Management System 1.0. This vulnerability affects unknown code of the file MainPanel.java. The manipulation of the argument searchTxt leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

8.8CVSS5.5AI score0.00407EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/13 12:00 a.m.•7 views

CVE-2025-8928: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Medical Store Management System 1.0. This affects an unknown part of the file UpdateMedicines.java of the component Update Medicines Page. The manipulation of the argument productNameTxt leads to sql injection. It is possible to initiate the attack...

8.8CVSS5.5AI score0.00407EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:06 a.m.•20 views

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

10CVSS8.3AI score0.01537EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/07/16 7:15 p.m.•15 views

CVE-2024-40392

SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to contain a SQL injection vulnerability via the name parameter under addnew.php...

9.8CVSS5.8AI score0.00502EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/07/16 12:00 a.m.•21 views

PT-2024-28824 · Unknown · Sourcecodester Pharmacy/Medical Store Point Of Sale System

Name of the Vulnerable Software and Affected Versions: SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the na...

9.8CVSS7.6AI score0.00502EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/16 12:00 a.m.•7 views

CVE-2024-40392: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to contain a SQL injection vulnerability via the name parameter under addnew.php...

9.8CVSS5.8AI score0.00502EPSS
SaveExploits1References1
NVD
NVD
•added 2024/06/07 1:15 p.m.•43 views

CVE-2024-36673

Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries...

9.8CVSS0.00524EPSS
SaveExploits1References1
CVE
CVE
•added 2024/06/07 12:56 p.m.•96 views

CVE-2024-36673

CVE-2024-36673 affects Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0. The vulnerability is an SQL Injection in login.php caused by inadequate validation of the email and password inputs, enabling injection of malicious SQL queries. Documented impact is high for confidentiality, i...

9.8CVSS7.8AI score0.00524EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/07 12:00 a.m.•6 views

CVE-2024-36673: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/03/04 12:00 a.m.•54 views

Medical Store Management System SQL Injection Vulnerability

Medical Store Management System is a pharmacy management system. SQL injection vulnerability exists in Medical Store Management System and no detailed vulnerability details are available...

10CVSS1.8AI score0.01537EPSS
SaveExploits1References1
NVD
NVD
•added 2022/03/02 11:15 p.m.•29 views

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

10CVSS0.01537EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/02 11:15 p.m.•11 views

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

10CVSS7.3AI score0.01537EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/03/02 11:15 p.m.•19 views

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

9.8CVSS5.8AI score0.01537EPSS
SaveExploits1References1
Prion
Prion
•added 2022/03/02 11:15 p.m.•23 views

Sql injection

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

10CVSS9.7AI score0.01537EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/03/02 10:39 p.m.•6 views

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

10CVSS0.01537EPSS
SaveExploits1References1
CVE
CVE
•added 2022/03/02 10:39 p.m.•178 views

CVE-2022-25394

CVE-2022-25394 affects the Medical Store Management System v1.0. The vulnerability is a SQL injection in the cid parameter of customer-add.php, with CVSS-3.1 base score 9.8 (CRITICAL) and high impact on confidentiality, integrity, and availability. The attack vector is network and requires no pri...

10CVSS9.8AI score0.01537EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/03/02 10:39 p.m.•37 views

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

10AI score0.01537EPSS
SaveExploits1References1
Rows per page
Query Builder