1146 matches found
CVE-2022-34951
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php...
Sql injection
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php...
Sql injection
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editcategory.php...
Sql injection
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at invoiceprint.php...
Sql injection
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editproduct.php...
Sql injection
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editbrand.php...
Sql injection
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edituser.php...
Sql injection
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php...
Sql injection
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php...
Sql injection
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php...
CVE-2022-34953
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php...
CVE-2022-34953
Pharmacy Management System v1.0 contains a SQL injection in getOrderReport.php via the startDate parameter. The root cause is lack of input validation leading to arbitrary SQL execution, enabling access to sensitive data. Affected product/component: Pharmacy Management System (MPMS) v1.0; vulnera...
CVE-2022-34954
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at invoiceprint.php...
CVE-2022-34954
Pharmacy Management System v1.0 contains a SQL injection vulnerability in invoiceprint.php exposed via the id parameter. Root cause: lack of input validation on external input for the SQL statement. Impact per sources: potential unauthorized access to sensitive data in the database. Exploitation ...
CVE-2022-34952
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edituser.php...
CVE-2022-34952
Pharmacy Management System v1.0 contains a SQL injection in the id parameter of edituser.php. The root cause is a lack of input validation for external SQL, enabling arbitrary database queries that could expose or modify data. Impact per sources includes potential access to sensitive data; CVSS d...
CVE-2022-34950
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editproduct.php...
CVE-2022-34950
CVE-2022-34950 : Multiple sources describe a SQL injection vulnerability in Pharmacy Management System v1.0, exposed via the id parameter of editproduct.php. The root cause is lack of validation of external input in the SQL statement, enabling an attacker to execute arbitrary SQL commands and pot...
CVE-2022-34951
The CVE-2022-34951 entry concerns Pharmacy Management System v1.0, where a SQL injection flaw exists in the getsalereport.php endpoint through the startDate parameter. The issue affects the application’s data integrity, confidentiality, and availability (CVSS v3.1 base score 9.8, CRITICAL). Explo...