CVE-2024-10140

CVE-2024-10140 このスクリプトは、エンドポイント /php/managesupplier.php?action=delete&id=32 で見つかったSQLインジェクションの脆弱性を悪用します。この脆弱性により、攻撃者はidパラメータを介して任意のSQLコマンドを注入でき、データベースを危険にさらし、機密情報を漏洩させる可能性があります。...

CVE-2026-26887

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managesupplier.php...

CVE-2026-26887: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managesupplier.php...

EUVD-2026-9304

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managesupplier.php...

Code-Projects Pharmacy Management System 跨站脚本漏洞

Code-Projects Pharmacy Management System is a Code-Projects open source pharmacy management system. A cross-site scripting vulnerability exists in Code-Projects Pharmacy Management System version 1.0, which stems from the parameter address in the file /managesupplier.php that causes cross-site...

CVE-2024-10140

The CVE-2024-10140 entry affects code-projects’ Pharmacy Management System 1.0, with the vulnerability located in /manage_supplier.php. The root cause is an SQL injection caused by manipulating the id parameter, enabling remote exploitation. Public exploit details exist (e.g., a GitHub exploit ta...

CVE-2024-10140 code-projects Pharmacy Management System manage_supplier.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affected by this issue is some unknown functionality of the file /managesupplier.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

CVE-2024-10140: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affected by this issue is some unknown functionality of the file /managesupplier.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

CVE-2024-10022: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/managesupplier.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The...