Lucene search
+L

205 matches found

EUVD
EUVD
added 2026/04/28 1:15 p.m.12 views

EUVD-2026-26051

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function supplier of the file /index.php?page=supplier. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. Th...

4.8CVSS3AI score0.00206EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/28 12:00 p.m.5 views

CVE-2026-7269 SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit has...

4.8CVSS3.3AI score0.0021EPSS
SaveExploits0References6
CVE
CVE
added 2026/04/28 12:00 p.m.20 views

CVE-2026-7269

The CVE concerns SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of /index.php?page=product; manipulating the argument ID results in cross-site scripting. The flaw can be triggered remotely, and the exploit has been published, indicating availability to att...

4.8CVSS3.5AI score0.0021EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/04/28 12:00 p.m.10 views

EUVD-2026-26041

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit has...

4.8CVSS3.5AI score0.0021EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/28 12:00 a.m.14 views

PT-2026-35726

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function supplier of the file /index.php?page=supplier. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. Th...

4.8CVSS3AI score0.00206EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/28 12:00 a.m.17 views

SourceCodester Pharmacy Sales and Inventory System 跨站脚本漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System contains a cross-site scripting vulnerability. This vulnerability stems from the...

4.8CVSS5.6AI score0.00206EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/28 12:00 a.m.10 views

PT-2026-35732

A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function delete expired of the file /ajax.php?action=delete expired. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit i...

5.8CVSS5.1AI score0.00206EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/28 12:00 a.m.15 views

SourceCodester Pharmacy Sales and Inventory System 注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the saveexpired...

5.8CVSS5.9AI score0.00263EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/28 12:00 a.m.13 views

PT-2026-35717

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit has...

4.8CVSS3.3AI score0.0021EPSS
SaveExploits0References9
CVE
CVE
added 2026/04/27 11:30 p.m.21 views

CVE-2026-7200

The CVE-2026-7200 issue affects SourceCodester Pharmacy Sales and Inventory System 1.0. Affected functionality is in /index.php?page=types, where manipulating the argument ID enables cross-site scripting. The vulnerability can be exploited remotely and exploits have been published. No remediation...

5.3CVSS3.7AI score0.0028EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/27 11:16 p.m.15 views

CVE-2026-7194

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=saveproduct. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS0.00254EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/27 11:15 p.m.5 views

CVE-2026-7199

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deleteproduct. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the atta...

7.5CVSS5.5AI score0.00265EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/04/27 10:45 p.m.41 views

CVE-2026-7194 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=saveproduct. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS0.00254EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/27 10:45 p.m.4 views

CVE-2026-7194

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=saveproduct. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS5.4AI score0.00254EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2026/04/27 2:16 p.m.9 views

CVE-2026-7128

A security vulnerability has been detected in SourceCodester Pharmacy Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=savetype. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has...

7.5CVSS0.00254EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/27 2:16 p.m.9 views

CVE-2026-7127

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deletereceiving. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS0.00254EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/27 2:16 p.m.10 views

CVE-2026-7126

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /ajax.php?action=savecategory. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released t...

7.5CVSS0.00254EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/27 2:00 p.m.31 views

CVE-2026-7130

CVE-2026-7130 affects SourceCodester Pharmacy Sales and Inventory System 1.0. The vulnerability resides in the unknown function of the file /ajax.php?action=delete_category , where manipulating the argument ID enables an SQL injection . The attack can be performed remotely and, per the descriptio...

7.5CVSS7.2AI score0.00254EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/27 2:00 p.m.42 views

CVE-2026-7130 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletecategory. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has...

7.5CVSS0.00254EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/27 2:00 p.m.9 views

CVE-2026-7130

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletecategory. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has...

7.5CVSS7.2AI score0.00254EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder