CVE-2024-28303

Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php...

CVE-2024-28303: Improper Neutralization of Special Elements used in an SQL Command

Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php...

CVE-2024-28303

The Open Source Medicine Ordering System v1.0 is vulnerable to a SQL injection flaw caused by improper neutralization of special elements. The vulnerability exists in the date parameter at the /admin/reports/index.php endpoint. Exploitation can lead to unauthorized access or manipulation of the u...