CVE-2026-10248

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System up to 1.0. This issue affects the function createsupplier of the file /Exportcsv/export of the component Supplier Creation Interface. This manipulation of the argument Address/Company Name causes csv injection...

Pharmacy Sales and Inventory System Cross-site Scripting Vulnerability (CNVD-2026-37994)

The Pharmacy Sales and Inventory System is a pharmacy sales and inventory management system developed by SourceCodester Corporation. The Pharmacy Sales and Inventory System has a cross-site scripting vulnerability, which stems from an improper validation of the companyname parameter in the...

Pharmacy Sales and Inventory System CSV Injection Vulnerability

The Pharmacy Sales and Inventory System is a pharmacy sales and inventory management system developed by SourceCodester Corporation. The Pharmacy Sales and Inventory System has a CSV injection vulnerability. This vulnerability stems from the createsupplier function in the Supplier Creation...

CVE-2026-10245: Improper Neutralization of Input During Web Page Generation

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is the function createsupplier of the file /ShowForm/createsupplier/main. Executing a manipulation of the argument companyname can lead to cross site scripting. The attack can be launched...

CVE-2026-10248: Improper Neutralization of Formula Elements in a CSV File

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System up to 1.0. This issue affects the function createsupplier of the file /Exportcsv/export of the component Supplier Creation Interface. This manipulation of the argument Address/Company Name causes csv injection...