69 matches found
Code-Projects Medical Store Management System 注入漏洞
Medical Store Management System is a pharmacy management system. Medical Store Management System suffers from a SQL injection vulnerability that originates from a misuse of the parameter productNameTxt in the file UpdateMedicines.java resulting in a SQL injection attack, which can be exploited by...
CVE-2022-25394
Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...
CVE-2024-40392
SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to contain a SQL injection vulnerability via the name parameter under addnew.php...
PT-2024-28824 · Unknown · Sourcecodester Pharmacy/Medical Store Point Of Sale System
Name of the Vulnerable Software and Affected Versions: SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the na...
CVE-2024-36673
Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries...
CVE-2024-36673
CVE-2024-36673 affects Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0. The vulnerability is an SQL Injection in login.php caused by inadequate validation of the email and password inputs, enabling injection of malicious SQL queries. Documented impact is high for confidentiality, i...
Medical Store Management System SQL Injection Vulnerability
Medical Store Management System is a pharmacy management system. SQL injection vulnerability exists in Medical Store Management System and no detailed vulnerability details are available...
CVE-2022-25394
Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...
CVE-2022-25394
Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...
CVE-2022-25394
Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...
Sql injection
Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...
CVE-2022-25394
CVE-2022-25394 affects the Medical Store Management System v1.0. The vulnerability is a SQL injection in the cid parameter of customer-add.php, with CVSS-3.1 base score 9.8 (CRITICAL) and high impact on confidentiality, integrity, and availability. The attack vector is network and requires no pri...
CVE-2022-25394
Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...
Medical Store Management System SQL注入漏洞
Medical Store Management System is a pharmacy management system. SQL injection vulnerability exists in Medical Store Management System and no detailed vulnerability details are available...
Medical Store Management System 1.0 SQL Injection
Title: Medical Store Management System v1.0 remote SQL-Injections Author: nu11secur1ty Date: 02.16.2022 Vendor: https://github.com/abhisheks008 Software: https://github.com/abhisheks008/Medical-Store-Management-System CVE-Medical Store Management System v1.0 Description: The cid parameter fom...
CVE-2020-24862
The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases...
Sql injection
The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases...
CVE-2020-24862
The CVE-2020-24862 entry concerns Pharmacy Medical Store and Sale Point v1.0, where the catID parameter in /medical/inventories.php is vulnerable to a Time-Based blind SQL injection. This weakness could allow an attacker to retrieve all databases from the backend. The vulnerability stems from imp...
Sourcecodester Medical Store Point SQL注入漏洞
Sourcecodester Medical Store Point is a Sourcecodester open source application. A Pharmacy/Medical Store Point of Sale POS system. Pharmacy Medical Store and Sale Point suffers from a SQL injection vulnerability that originates from a blind time-based SQL injection attack performed on the Medical...
Pharmacy/Medical Store & Sale Point 1.0 - 'email' SQL Injection
Exploit Title: Pharmacy/Medical Store & Sale Point 1.0 - 'email' SQL Injection Date: 2020-08-23 Exploit Author: @naivenom Vendor Homepage: https://www.sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.html Software Link:...