Lucene search
+L

1328 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/29 12:00 a.m.•6 views

CVE-2021-41676: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerabilty exists in the oretnom23 Pharmacy Point of Sale System 1.0 in the login function in actions.php...

9.8CVSS5.8AI score0.01473EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/10/29 12:00 a.m.•11 views

Pharmacy Point Of Sale System SQL注入漏洞

Pharmacy Point Of Sale System is a web-based application by Carlo Montero, an individual developer. It is used to help a pharmacy manage its sales transactions. A SQL injection vulnerability exists in oretnom23 Pharmacy Point of Sale System version 1.0, which allows an attacker to perform SQL...

9.8CVSS8.6AI score0.01473EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/10/29 12:00 a.m.•5 views

PT-2021-23371

Name of the Vulnerable Software and Affected Versions oretnom23 Pharmacy Point of Sale System version 1.0 Description An SQL Injection issue exists in the login function in actions.php. This allows for potential unauthorized access to sensitive data. Recommendations For oretnom23 Pharmacy Point o...

9.8CVSS0.01473EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/10/29 12:00 a.m.•15 views

Pharmacy Point Of Sale System SQL注入漏洞

Pharmacy Point Of Sale System is a web-based application by Carlo Montero, an individual developer. It is used to help a pharmacy manage its sales transactions. A SQL injection vulnerability exists in Pharmacy Point of Sale System version 1.0, which can be exploited via the useremail parameter in...

9.8CVSS8.2AI score0.0174EPSS
SaveExploits1References4
Exploit DB
Exploit DB
•added 2021/10/13 12:00 a.m.•317 views

Pharmacy Point of Sale System 1.0 - 'Add New User' Cross-Site Request Forgery (CSRF)

Exploit Title: Pharmacy Point of Sale System 1.0 - 'Add New User' Cross-Site Request Forgery CSRF Date: 10/11/2021 Exploit Author: Murat DEMIRCI @butterflyhunt3r Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2021/10/13 12:00 a.m.•299 views

Pharmacy Point Of Sale System 1.0 Cross Site Request Forgery

Exploit Title: Pharmacy Point of Sale System 1.0 - 'Add New User' Cross-Site Request Forgery CSRF Date: 10/11/2021 Exploit Author: Murat DEMIRCI @butterflyhunt3r Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

0.3AI score
SaveExploits0
zdt
zdt
•added 2021/10/13 12:00 a.m.•285 views

Pharmacy Point of Sale System 1.0 - (Add New User) Cross-Site Request Forgery Vulnerability

Exploit Title: Pharmacy Point of Sale System 1.0 - 'Add New User' Cross-Site Request Forgery CSRF Exploit Author: Murat DEMIRCI @butterflyhunt3r Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

0.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2021/09/30 12:00 a.m.•430 views

Pharmacy Point Of Sale System 1.0 SQL Injection

Exploit Title: Pharmacy Point of Sale System 1.0 - 'Multiple' SQL Injection SQLi Date: 28.09.2021 Exploit Author: Murat Vendor Homepage: https://www.sourcecodester.com/php/14957/pharmacy-point-sale-system-using-php-and-sqlite-free-source-code.html Software Link:...

0.1AI score
SaveExploits0
zdt
zdt
•added 2021/09/30 12:00 a.m.•278 views

Pharmacy Point of Sale System 1.0 - (Multiple) SQL Injection Vulnerability

Exploit Title: Pharmacy Point of Sale System 1.0 - 'Multiple' SQL Injection SQLi Exploit Author: Murat Vendor Homepage: https://www.sourcecodester.com/php/14957/pharmacy-point-sale-system-using-php-and-sqlite-free-source-code.html Software Link:...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2021/09/24 12:00 a.m.•194 views

Pharmacy Point of Sale System 1.0 - SQLi Authentication BYpass

Exploit Title: Pharmacy Point of Sale System 1.0 - SQLi Authentication Bypass Date: 23.09.2021 Exploit Author: Janik Wehrli Vendor Homepage: https://www.sourcecodester.com/php/14957/pharmacy-point-sale-system-using-php-and-sqlite-free-source-code.html Software Link:...

5.3AI score
SaveExploits0
zdt
zdt
•added 2021/09/24 12:00 a.m.•240 views

Pharmacy Point of Sale System 1.0 - SQL injection Authentication Bypass Vulnerability

Exploit Title: Pharmacy Point of Sale System 1.0 - SQLi Authentication Bypass Exploit Author: Janik Wehrli Vendor Homepage: https://www.sourcecodester.com/php/14957/pharmacy-point-sale-system-using-php-and-sqlite-free-source-code.html Software Link:...

0.4AI score
SaveExploits0
zdt
zdt
•added 2021/09/24 12:00 a.m.•459 views

Pharmacy Point Of Sale System 1.0 SQL Injection Vulnerability

Exploit Title: Pharmacy Point of Sale System v1.0 - SQLi Authentication Bypass Exploit Author: Janik Wehrli Vendor Homepage: https://www.sourcecodester.com/php/14957/pharmacy-point-sale-system-using-php-and-sqlite-free-source-code.html Software Link:...

SaveExploits0
Packet Storm
Packet Storm
•added 2021/09/23 12:00 a.m.•213 views

Pharmacy Point Of Sale System 1.0 SQL Injection

Exploit Title: Pharmacy Point of Sale System v1.0 - SQLi Authentication Bypass Date: 23.09.2021 Exploit Author: Janik Wehrli Vendor Homepage: https://www.sourcecodester.com/php/14957/pharmacy-point-sale-system-using-php-and-sqlite-free-source-code.html Software Link:...

0.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/09/08 12:00 a.m.•13 views

The vulnerability of the catID parameter in the Pharmacy Medical Store And Sale Point medical software, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL commands and gain access to confidential data.

The vulnerability of the catID parameter in the medical software Pharmacy Medical Store And Sale Point is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL commands and gain access to confidential da...

7.5CVSS7.7AI score0.02051EPSS
SaveExploits1References6Affected Software1
Wired Threat Level
Wired Threat Level
•added 2021/06/19 1:00 p.m.•55 views

A Bug in the Android Google App Put Privacy at Risk

Plus: Airbnb's safety squad, a fake pharmacy crackdown, and more of the week's top security news...

2.9AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2021/06/17 4:47 p.m.•200 views

CVS Health Records for 1.1 Billion Customers Exposed

More than 1 billion records for CVS Health customers were left in the database of a third-party, unnamed vendor – exposed, unprotected, online. Researchers said the data points revealed could be strung together to create an extremely personal snapshot of someones’s medical situation. The glitch i...

7AI score
SaveExploits0References8
OSV
OSV
•added 2021/06/02 5:15 p.m.•11 views

CVE-2020-24862

The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases...

7.5CVSS5.7AI score
SaveExploits0References3
NVD
NVD
•added 2021/06/02 5:15 p.m.•21 views

CVE-2020-24862

The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases...

7.5CVSS0.02051EPSS
SaveExploits1References3
Prion
Prion
•added 2021/06/02 5:15 p.m.•27 views

Sql injection

The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases...

5CVSS7.9AI score0.02051EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/06/02 4:50 p.m.•35 views

CVE-2020-24862

The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases...

7.9AI score0.02051EPSS
SaveExploits1References3
Rows per page
Query Builder