Lucene search
+L

15 matches found

Kitploit
Kitploit
•added 2026/09/28 5:31 a.m.•12 views

pharmacy-sqli-CVE-2026-7392

Pharmacy Sales and Inventory System 1.0 - CVE-2026-7392 SQL Injection SourceCodester Pharmacy Sales and Inventory System V1.0 pure PHP/MySQL version CVE : CVE-2026-7392 Endpoint : /ajax.php?action=deletesupplier id parameter Type : SQL Injection CWE-89 CVSS 3.1 : 6.3 Medium Author : oretnom23...

6.5CVSS6.9AI score0.00316EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/16 2:16 a.m.•17 views

CVE-2026-19925

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS0.00349EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/16 1:30 a.m.•57 views

CVE-2026-19925

CVE-2026-19925 affects SourceCodester Stock Management System 1.0. The vulnerability is a SQL injection in the handling of the argument ID via /classes/Master.php?f=delete_supplier, which may be triggered remotely. The exploitation surface is remote, and public exploits are reported. No specific ...

5.8CVSS5.5AI score0.00349EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/08/16 1:30 a.m.•35 views

CVE-2026-19925

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS5.2AI score0.00349EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2026/08/16 1:30 a.m.•54 views

CVE-2026-19925 SourceCodester Stock Management System Master.php delete_supplier sql injection

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS0.00349EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/16 1:30 a.m.•14 views

EUVD-2026-59838

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS5.2AI score0.00349EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/16 1:30 a.m.•24 views

CVE-2026-19925 SourceCodester Stock Management System Master.php delete_supplier sql injection

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS5.5AI score0.00349EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/16 12:00 a.m.•2 views

CVE-2026-19925: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS5.6AI score0.00349EPSS
SaveExploits0References3
CNVD
CNVD
•added 2026/04/30 12:00 a.m.•6 views

SQL Injection Vulnerability in Pharmacy Sales and Inventory System (CNVD-2026-38001)

The Pharmacy Sales and Inventory System is a pharmacy sales and inventory management system developed by SourceCodester Corporation. The Pharmacy Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the failure of the deletesupplier function in the ajax.php...

6.5CVSS6.6AI score0.00316EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/04/29 4:45 p.m.•10 views

CVE-2026-7392 SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function deletesupplier of the file /ajax.php?action=deletesupplier. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•1 views

CVE-2026-7392: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function deletesupplier of the file /ajax.php?action=deletesupplier. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/29 12:00 a.m.•21 views

SourceCodester Pharmacy Sales and Inventory System 注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System has a SQL injection vulnerability. This vulnerability arises from improper...

6.5CVSS6.6AI score0.00316EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/15 12:00 a.m.•1 views

CVE-2025-10416: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=deletesupplier. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/04/21 8:15 p.m.•7 views

CVE-2022-28023

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

9.8CVSS7.3AI score0.02621EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/21 12:00 a.m.•7 views

CVE-2022-28023: Improper Neutralization of Special Elements used in an SQL Command

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

9.8CVSS8.2AI score0.02621EPSS
SaveExploits1References2
Rows per page
Query Builder