9 matches found
CVE-2024-10140
CVE-2024-10140 Ce script exploite une vulnérabilité d'injection SQL présente dans le point de terminaison /php/managesupplier.php?action=delete&id=32. La vulnérabilité permet à un attaquant d'injecter des commandes SQL arbitraires via le paramètre id, compromettant potentiellement la base de...
CVE-2026-26887
Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managesupplier.php...
CVE-2026-26887: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managesupplier.php...
EUVD-2026-9304
Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managesupplier.php...
Code-Projects Pharmacy Management System 跨站脚本漏洞
Code-Projects Pharmacy Management System is a Code-Projects open source pharmacy management system. A cross-site scripting vulnerability exists in Code-Projects Pharmacy Management System version 1.0, which stems from the parameter address in the file /managesupplier.php that causes cross-site...
CVE-2024-10140
The CVE-2024-10140 entry affects code-projects’ Pharmacy Management System 1.0, with the vulnerability located in /manage_supplier.php. The root cause is an SQL injection caused by manipulating the id parameter, enabling remote exploitation. Public exploit details exist (e.g., a GitHub exploit ta...
CVE-2024-10140 code-projects Pharmacy Management System manage_supplier.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affected by this issue is some unknown functionality of the file /managesupplier.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...
CVE-2024-10140: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affected by this issue is some unknown functionality of the file /managesupplier.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...
CVE-2024-10022: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/managesupplier.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The...