Lucene search
+L

5 matches found

Cvelist
Cvelist
•added 2026/05/01 3:45 a.m.•53 views

CVE-2026-7550 SourceCodester Pharmacy Sales and Inventory System ajax.php save_customer sql injection

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=savecustomer. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS0.00411EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/05/01 3:45 a.m.•12 views

CVE-2026-7550

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=savecustomer. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
•added 2026/05/01 12:00 a.m.•31 views

SourceCodester Pharmacy Sales and Inventory System Injection Vulnerability

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System has a SQL injection vulnerability, which arises from incorrect handling of the...

7.5CVSS7.1AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/01 12:00 a.m.•29 views

PT-2026-36297

Name of the Vulnerable Software and Affected Versions SourceCodester Pharmacy Sales and Inventory System version 1.0 Description An issue exists in the '/ajax.php?action=save customer' endpoint where manipulation of the ID argument allows for SQL injection, a technique used to interfere with the...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2025/09/14 11:15 p.m.•18 views

CVE-2025-10414

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. The impacted element is an unknown function of the file /ajax.php?action=savecustomer. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit...

9.8CVSS5.7AI score0.00415EPSS
SaveExploits1References5
Rows per page
Query Builder