509 matches found
PT-2022-20101
Name of the Vulnerable Software and Affected Versions Pharmacy Sales And Inventory System version 1.0 Description The issue allows for SQL Injection via the /pharmacy-sales-and-inventory-system/manage user.php API endpoint, specifically through the id variable. This could potentially lead to...
CVE-2022-30407: Improper Neutralization of Special Elements used in an SQL Command
Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...
Sql injection
SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...
CVE-2021-25202
SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...
CVE-2021-25202
CVE-2021-25202 describes a SQL injection vulnerability in the SourceCodester Sales and Inventory System v1.0. The flaw allows remote attackers to execute arbitrary SQL statements through the id parameter in the path \ahira\admin\inventory.php. The condition enables potential disclosure or modific...
PT-2021-16454
Name of the Vulnerable Software and Affected Versions: SourceCodester Sales and Inventory System version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the id parameter to the "/ahira/admin/inventory.php" API endpoint. Recommendations:...
CVE-2021-25202: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...
CVE-2020-28133: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in salesinventory/login.php...
PT-2020-16931
Name of the Vulnerable Software and Affected Versions SourceCodester Simple Grocery Store Sales And Inventory System version 1.0 Description An issue was discovered in the web login functionality, allowing authentication bypass. This enables an attacker to gain client privileges via SQL injection...