Lucene search
+L

69 matches found

CNNVD
CNNVD
added 2025/08/13 12:00 a.m.9 views

Code-Projects Medical Store Management System 注入漏洞

Medical Store Management System is a pharmacy management system. Medical Store Management System suffers from a SQL injection vulnerability that originates from a misuse of the parameter productNameTxt in the file UpdateMedicines.java resulting in a SQL injection attack, which can be exploited by...

8.8CVSS7.7AI score0.00382EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/05/23 12:06 a.m.13 views

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

10CVSS8.3AI score0.01537EPSS
SaveExploits1References1
OSV
OSV
added 2024/07/16 7:15 p.m.7 views

CVE-2024-40392

SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to contain a SQL injection vulnerability via the name parameter under addnew.php...

9.8CVSS5.8AI score0.00502EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/07/16 12:00 a.m.10 views

PT-2024-28824 · Unknown · Sourcecodester Pharmacy/Medical Store Point Of Sale System

Name of the Vulnerable Software and Affected Versions: SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the na...

9.8CVSS7.6AI score0.00502EPSS
SaveExploits1References4
NVD
NVD
added 2024/06/07 1:15 p.m.35 views

CVE-2024-36673

Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries...

9.8CVSS0.00524EPSS
SaveExploits1References1
CVE
CVE
added 2024/06/07 12:56 p.m.82 views

CVE-2024-36673

CVE-2024-36673 affects Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0. The vulnerability is an SQL Injection in login.php caused by inadequate validation of the email and password inputs, enabling injection of malicious SQL queries. Documented impact is high for confidentiality, i...

9.8CVSS7.8AI score0.00524EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2022/03/04 12:00 a.m.24 views

Medical Store Management System SQL Injection Vulnerability

Medical Store Management System is a pharmacy management system. SQL injection vulnerability exists in Medical Store Management System and no detailed vulnerability details are available...

10CVSS1.8AI score0.01537EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/02 11:15 p.m.7 views

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

10CVSS7.3AI score0.01537EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/02 11:15 p.m.8 views

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

9.8CVSS5.8AI score0.01537EPSS
SaveExploits1References1
NVD
NVD
added 2022/03/02 11:15 p.m.22 views

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

10CVSS0.01537EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/02 11:15 p.m.15 views

Sql injection

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

10CVSS9.7AI score0.01537EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/03/02 10:39 p.m.168 views

CVE-2022-25394

CVE-2022-25394 affects the Medical Store Management System v1.0. The vulnerability is a SQL injection in the cid parameter of customer-add.php, with CVSS-3.1 base score 9.8 (CRITICAL) and high impact on confidentiality, integrity, and availability. The attack vector is network and requires no pri...

10CVSS9.8AI score0.01537EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/03/02 10:39 p.m.28 views

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

10AI score0.01537EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/03/02 12:00 a.m.6 views

Medical Store Management System SQL注入漏洞

Medical Store Management System is a pharmacy management system. SQL injection vulnerability exists in Medical Store Management System and no detailed vulnerability details are available...

10CVSS8.6AI score0.01537EPSS
SaveExploits1References2
Packet Storm
Packet Storm
added 2022/02/16 12:00 a.m.244 views

Medical Store Management System 1.0 SQL Injection

Title: Medical Store Management System v1.0 remote SQL-Injections Author: nu11secur1ty Date: 02.16.2022 Vendor: https://github.com/abhisheks008 Software: https://github.com/abhisheks008/Medical-Store-Management-System CVE-Medical Store Management System v1.0 Description: The cid parameter fom...

0.1AI score
SaveExploits0
NVD
NVD
added 2021/06/02 5:15 p.m.16 views

CVE-2020-24862

The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases...

7.5CVSS0.02051EPSS
SaveExploits1References3
Prion
Prion
added 2021/06/02 5:15 p.m.19 views

Sql injection

The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases...

5CVSS7.9AI score0.02051EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2021/06/02 4:50 p.m.53 views

CVE-2020-24862

The CVE-2020-24862 entry concerns Pharmacy Medical Store and Sale Point v1.0, where the catID parameter in /medical/inventories.php is vulnerable to a Time-Based blind SQL injection. This weakness could allow an attacker to retrieve all databases from the backend. The vulnerability stems from imp...

7.5CVSS7.9AI score0.02051EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2021/06/02 12:00 a.m.8 views

Sourcecodester Medical Store Point SQL注入漏洞

Sourcecodester Medical Store Point is a Sourcecodester open source application. A Pharmacy/Medical Store Point of Sale POS system. Pharmacy Medical Store and Sale Point suffers from a SQL injection vulnerability that originates from a blind time-based SQL injection attack performed on the Medical...

7.5CVSS7.7AI score0.02051EPSS
SaveExploits1References3
Exploit DB
Exploit DB
added 2020/12/01 12:00 a.m.485 views

Pharmacy/Medical Store & Sale Point 1.0 - 'email' SQL Injection

Exploit Title: Pharmacy/Medical Store & Sale Point 1.0 - 'email' SQL Injection Date: 2020-08-23 Exploit Author: @naivenom Vendor Homepage: https://www.sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.html Software Link:...

5.3AI score
SaveExploits0
Rows per page
Query Builder