Lucene search
+L

6 matches found

Kitploit
Kitploit
added 2026/08/29 12:42 p.m.6 views

CVE-2024-10140

CVE-2024-10140 Lo script sfrutta una vulnerabilità di SQL Injection presente nell'endpoint /php/managesupplier.php?action=delete&id=32. La vulnerabilità consente a un attaccante di iniettare comandi SQL arbitrari tramite il parametro id, compromettendo potenzialmente il database ed esponendo...

9.8CVSS6.7AI score0.01378EPSS
SaveExploits2
OSV
OSV
added 2026/03/03 8:16 p.m.10 views

CVE-2026-26887

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managesupplier.php...

2.7CVSS5.9AI score0.00284EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/03 12:00 a.m.12 views

EUVD-2026-9304

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managesupplier.php...

2.7CVSS6AI score0.00284EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.8 views

Code-Projects Pharmacy Management System 跨站脚本漏洞

Code-Projects Pharmacy Management System is a Code-Projects open source pharmacy management system. A cross-site scripting vulnerability exists in Code-Projects Pharmacy Management System version 1.0, which stems from the parameter address in the file /managesupplier.php that causes cross-site...

5.1CVSS3.8AI score0.0039EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2024/10/19 2:31 p.m.38 views

CVE-2024-10140 code-projects Pharmacy Management System manage_supplier.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affected by this issue is some unknown functionality of the file /managesupplier.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

6.5CVSS0.01378EPSS
SaveExploits2References5
CVE
CVE
added 2024/10/19 2:31 p.m.72 views

CVE-2024-10140

The CVE-2024-10140 entry affects code-projects’ Pharmacy Management System 1.0, with the vulnerability located in /manage_supplier.php. The root cause is an SQL injection caused by manipulating the id parameter, enabling remote exploitation. Public exploit details exist (e.g., a GitHub exploit ta...

9.8CVSS7AI score0.01378EPSS
SaveExploits2References5Affected Software1
Rows per page
Query Builder