Lucene search
+L

1146 matches found

NVD
NVD
added 2024/07/16 7:15 p.m.25 views

CVE-2024-40392

SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to contain a SQL injection vulnerability via the name parameter under addnew.php...

9.8CVSS0.00502EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/07/16 12:00 a.m.12 views

PT-2024-28824 · Unknown · Sourcecodester Pharmacy/Medical Store Point Of Sale System

Name of the Vulnerable Software and Affected Versions: SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the na...

9.8CVSS7.6AI score0.00502EPSS
SaveExploits1References4
OSV
OSV
added 2024/06/07 1:15 p.m.6 views

CVE-2024-36673

Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/07 1:15 p.m.35 views

CVE-2024-36673

Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries...

9.8CVSS0.00524EPSS
SaveExploits1References1
CVE
CVE
added 2024/06/07 12:56 p.m.84 views

CVE-2024-36673

CVE-2024-36673 affects Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0. The vulnerability is an SQL Injection in login.php caused by inadequate validation of the email and password inputs, enabling injection of malicious SQL queries. Documented impact is high for confidentiality, i...

9.8CVSS7.8AI score0.00524EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/07 12:00 a.m.9 views

PT-2024-27116 · Unknown · Sourcecodester Pharmacy/Medical Store Point Of Sale System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Pharmacy/Medical Store Point of Sale System version 1.0 Description: The issue stems from inadequate validation of user inputs for the email and password parameters in the "login.php" endpoint, allowing attackers to inject...

9.8CVSS7.2AI score0.00524EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/06/07 12:00 a.m.8 views

Pharmacy/Medical Store Point of Sale System SQL Injection Vulnerability

Pharmacy/Medical Store Point of Sale System is a pharmacy/pharmacy point of sale POS system by fkgeo Personal Developer. A SQL injection vulnerability exists in the Pharmacy/Medical Store Point of Sale System version 1.0, which stems from insufficient validation of user input for the email and...

9.8CVSS8AI score0.00524EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/05/01 12:00 a.m.9 views

Point of Sale System 安全漏洞

Pharmacy Point Of Sale System is a web-based application by Carlo Montero, an individual developer. It is used to help a pharmacy manage its sales transactions. A security vulnerability exists in Point of Sale System version 1.0. An attacker can exploit this vulnerability to execute arbitrary cod...

6.1CVSS7.3AI score0.00454EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2024/03/19 1:15 a.m.5 views

CVE-2023-40276

An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in pharmacy/exportFile.jsp...

9.1CVSS5.7AI score0.00736EPSS
SaveExploits1References3
NVD
NVD
added 2024/03/19 1:15 a.m.21 views

CVE-2023-40276

An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in pharmacy/exportFile.jsp...

9.1CVSS6.6AI score0.00736EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/19 1:15 a.m.6 views

CVE-2023-40276

An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in pharmacy/exportFile.jsp...

9.1CVSS5.7AI score0.00736EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/03/19 12:00 a.m.10 views

CVE-2023-40276

An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in pharmacy/exportFile.jsp...

6.9AI score0.00736EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/03/19 12:00 a.m.28 views

CVE-2023-40276

An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in pharmacy/exportFile.jsp...

6.8AI score0.00736EPSS
SaveExploits1References2
CVE
CVE
added 2024/03/19 12:00 a.m.59 views

CVE-2023-40276

OpenClinic GA 5.247.01 contains an unauthenticated file download vulnerability in pharmacy/exportFile.jsp. The issue allows unauthorized access to files, with CVSS v3.1 base score 9.1 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). No exploitation details are provided in the primary CVE entry. R...

9.1CVSS6.8AI score0.00736EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/18 12:00 a.m.11 views

PT-2024-12879 · Unknown · Openclinic Ga

Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.247.01 Description: An Unauthenticated File Download issue has been discovered in the pharmacy/exportFile.jsp file. This allows unauthorized access to sensitive files. Recommendations: For OpenClinic GA version 5.247.0...

9.1CVSS6.7AI score0.00736EPSS
SaveExploits1References5
hivepro
hivepro
added 2024/02/29 3:25 p.m.42 views

BlackCat’s Resurgence Despite Law Enforcement Disruptions

Summary: Blackcat, a sophisticated Ransomware-as-a-Service operation, infiltrates networks using advanced social engineering and remote access tools, offering triple extortion tactics and cyber remediation advice for ransom payment, and resurged after a December 2023 disruption, causing widesprea...

7.4AI score
SaveExploits0
NVD
NVD
added 2023/11/22 12:15 p.m.27 views

CVE-2023-5983

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data. This issue affects Pharmacy Automation: before 2.1.133.0...

7.5CVSS0.00628EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/22 12:15 p.m.9 views

CVE-2023-5983

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data.This issue affects Pharmacy Automation: before 2.1.133.0...

7.5CVSS7.1AI score0.00628EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/11/22 12:15 p.m.7 views

CVE-2023-5983

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data. This issue affects Pharmacy Automation: before 2.1.133.0...

7.5CVSS5.8AI score0.00628EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/11/22 11:54 a.m.27 views

CVE-2023-5983 Information Disclosure in Botanik Software Pharmacy Automation

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data. This issue affects Pharmacy Automation: before 2.1.133.0...

7.5CVSS7.7AI score0.00628EPSS
SaveExploits0References2
Rows per page
Query Builder