359 matches found
CVE-2025-3696 SourceCodester Web-based Pharmacy Product Management System search_stock. php sql injection
A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /search/searchstock. php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. Th...
CVE-2025-3694 SourceCodester Web-based Pharmacy Product Management System Login sql injection
A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the component Login Handler. The manipulation of the argument loginemail leads to sql injection. It is possible to initiate the attack remotely...
PT-2025-16780 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue has been discovered, affecting the Login Handler component. The manipulation of the login email argument leads to SQL injection. This issue...
SourceCodester Web-based Pharmacy Product Management System 注入漏洞
SourceCodester Web-based Pharmacy Product Management System is SourceCodester open source a Web-based pharmacy product management system . An injection vulnerability exists in the SourceCodester Web-based Pharmacy Product Management System version 1.0, which results from SQL injection due to...
PT-2025-16782 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /edit-product.php. The manipulation of the ID argument leads to SQL...
CVE-2025-3383
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search/searchsales.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated...
CVE-2025-3383 SourceCodester Web-based Pharmacy Product Management System search_sales.php sql injection
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search/searchsales.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated...
CVE-2025-3383
SourceCodester Web-based Pharmacy Product Management System 1.0 contains a SQL injection in the /search/search_sales.php handler, triggered by manipulating the Name argument. Impact is described as remote exploitation with high/severe risk across multiple CVE sources, with exploitation details al...
CVE-2025-3244
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add-admin.php of the component Create User Page. The manipulation of the argument Avatar leads to...
CVE-2025-3244
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add-admin.php of the component Create User Page. The manipulation of the argument Avatar leads to...
CVE-2025-3244 SourceCodester Web-based Pharmacy Product Management System Create User Page add-admin.php unrestricted upload
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add-admin.php of the component Create User Page. The manipulation of the argument Avatar leads to...
CVE-2025-3244
CVE-2025-3244 affects SourceCodester Web-based Pharmacy Product Management System 1.0. The vulnerability is in the Create User Page’s file /add-admin.php, where manipulation of the Avatar parameter enables unrestricted file upload, with remote exploitation reported. Several connected sources conf...
CVE-2025-3244 SourceCodester Web-based Pharmacy Product Management System Create User Page add-admin.php unrestricted upload
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add-admin.php of the component Create User Page. The manipulation of the argument Avatar leads to...
PT-2024-16109 · Code Projects · Code-Projects Pharmacy Management System
Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical issue affects the processing of the file /add new invoice.php, where the manipulation of the text argument leads to SQL injection. The attack can be initiated...
CVE-2024-9813 Codezips Pharmacy Management System register.php sql injection
A vulnerability, which was classified as critical, has been found in Codezips Pharmacy Management System 1.0. This issue affects some unknown processing of the file product/register.php. The manipulation of the argument category leads to sql injection. The attack may be initiated remotely. The...
Codezips Pharmacy Management System SQL注入漏洞
Codezips Pharmacy Management System is a pharmacy management system from Codezips. A SQL injection vulnerability exists in Codezips Pharmacy Management System version 1.0, which originates in the file produc/Register.php with the parameter category that can lead to SQL injection...
CVE-2024-40392
SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to contain a SQL injection vulnerability via the name parameter under addnew.php...
CVE-2024-36673
Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries...
PT-2024-27116 · Unknown · Sourcecodester Pharmacy/Medical Store Point Of Sale System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Pharmacy/Medical Store Point of Sale System version 1.0 Description: The issue stems from inadequate validation of user inputs for the email and password parameters in the "login.php" endpoint, allowing attackers to inject...
Point of Sale System 安全漏洞
Pharmacy Point Of Sale System is a web-based application by Carlo Montero, an individual developer. It is used to help a pharmacy manage its sales transactions. A security vulnerability exists in Point of Sale System version 1.0. An attacker can exploit this vulnerability to execute arbitrary cod...