CVE-2025-4888: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. This affects the function medicineType::takeorder of the component Add Order Details. The manipulation leads to buffer overflow. An attack has to be approached locally. The exploit has be...

CVE-2024-10199 code-projects Pharmacy Management System Manage Medicines Page manage_medicine.php cross site scripting

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /managemedicine.php of the component Manage Medicines Page. The manipulation of the argument...

CVE-2024-10196 code-projects Pharmacy Management System add_new_invoice.php sql injection

A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /addnewinvoice.php. The manipulation of the argument text leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-10196: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /addnewinvoice.php. The manipulation of the argument text leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-10199: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /managemedicine.php of the component Manage Medicines Page. The manipulation of the argument...

CVE-2024-10198: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /managecustomer.php of the component Manage Customer Page. The manipulation of the argument suppliersname/address...

CVE-2024-10197: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /managesupplier.php of the component Manage Supplier Page. The manipulation of the argument address leads to cross site scripting. It is...

CVE-2024-10140 code-projects Pharmacy Management System manage_supplier.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affected by this issue is some unknown functionality of the file /managesupplier.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

CVE-2024-10140

The CVE-2024-10140 entry affects code-projects’ Pharmacy Management System 1.0, with the vulnerability located in /manage_supplier.php. The root cause is an SQL injection caused by manipulating the id parameter, enabling remote exploitation. Public exploit details exist (e.g., a GitHub exploit ta...

CVE-2024-10139 code-projects Pharmacy Management System add_new_supplier.php sql injection

A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /addnewsupplier.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The...

CVE-2024-10138 code-projects Pharmacy Management System add_new_purchase.php sql injection

A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. Affected is an unknown function of the file /addnewpurchase.php?action=issupplier. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-10138: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. Affected is an unknown function of the file /addnewpurchase.php?action=issupplier. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-10137: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /managemedicine.php?action=delete. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-10140: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affected by this issue is some unknown functionality of the file /managesupplier.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

CVE-2024-10139: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /addnewsupplier.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The...

CVE-2024-10136: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manageinvoice.php. The manipulation of the argument invoicenumber leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-10022 code-projects Pharmacy Management System manage_supplier.php sql injection

A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/managesupplier.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-10021 code-projects Pharmacy Management System manage_purchase.php sql injection

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /php/managepurchase.php?action=search&tag=VOUCHERNUMBER. The manipulation of the argument text leads to sql injection. The...

CVE-2024-10021: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /php/managepurchase.php?action=search&tag=VOUCHERNUMBER. The manipulation of the argument text leads to sql injection. The...

CVE-2024-10023: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /php/addnewmedicine.php. The manipulation of the argument name/packing/genericname/suppliersname leads to sql injection. The attack can be initiate...