Lucene search
+L

252 matches found

Positive Technologies
Positive Technologies
•added 2026/04/29 12:00 a.m.•25 views

PT-2026-35958

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function delete supplier of the file /ajax.php?action=delete supplier. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/29 12:00 a.m.•21 views

PT-2026-35955

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function save supplier of the file /ajax.php?action=save supplier. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS6.3AI score0.00316EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•7 views

CVE-2026-7392: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function deletesupplier of the file /ajax.php?action=deletesupplier. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•4 views

CVE-2026-7391: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function savesupplier of the file /ajax.php?action=savesupplier. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publish...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•6 views

CVE-2026-7390: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function Customer of the file /index.php?page=customer. The manipulation of the argument Name results in cross site scripting. The attack may be launched remotely. The exploit is no...

5.1CVSS3.8AI score0.00331EPSS
SaveExploits0References3
NVD
NVD
•added 2026/04/28 3:16 p.m.•16 views

CVE-2026-7282

A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function deleteexpired of the file /ajax.php?action=deleteexpired. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is...

5.8CVSS0.00332EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/28 2:16 p.m.•22 views

CVE-2026-7281

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function supplier of the file /index.php?page=supplier. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. Th...

4.8CVSS0.0035EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/28 2:15 p.m.•21 views

EUVD-2026-26066

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function saveexpired of the file /ajax.php?action=saveexpired. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit ha...

5.8CVSS5.1AI score0.00332EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/28 1:30 p.m.•22 views

CVE-2026-7282

A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function deleteexpired of the file /ajax.php?action=deleteexpired. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is...

5.8CVSS5.1AI score0.00332EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/04/28 1:30 p.m.•53 views

CVE-2026-7282 SourceCodester Pharmacy Sales and Inventory System ajax.php delete_expired sql injection

A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function deleteexpired of the file /ajax.php?action=deleteexpired. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is...

5.8CVSS0.00332EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/28 1:19 p.m.•23 views

CVE-2026-7269

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit has...

4.8CVSS0.00368EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/04/28 1:15 p.m.•14 views

CVE-2026-7281 SourceCodester Pharmacy Sales and Inventory System index.php supplier cross site scripting

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function supplier of the file /index.php?page=supplier. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. Th...

4.8CVSS3.7AI score0.0035EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/28 1:15 p.m.•21 views

EUVD-2026-26051

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function supplier of the file /index.php?page=supplier. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. Th...

4.8CVSS3AI score0.0035EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/28 1:15 p.m.•15 views

CVE-2026-7281

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function supplier of the file /index.php?page=supplier. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. Th...

4.8CVSS3.7AI score0.0035EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/04/28 12:00 p.m.•33 views

CVE-2026-7269

The CVE concerns SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of /index.php?page=product; manipulating the argument ID results in cross-site scripting. The flaw can be triggered remotely, and the exploit has been published, indicating availability to att...

4.8CVSS4AI score0.00368EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/04/28 12:00 p.m.•15 views

CVE-2026-7269 SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit has...

4.8CVSS4AI score0.00368EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/04/28 12:00 p.m.•20 views

EUVD-2026-26041

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit has...

4.8CVSS3.5AI score0.00368EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•25 views

PT-2026-35717

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit has...

4.8CVSS3.3AI score0.00368EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•23 views

SourceCodester Pharmacy Sales and Inventory System Injection Vulnerability

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the saveexpired...

5.8CVSS5.4AI score0.00332EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•19 views

PT-2026-35732

A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function delete expired of the file /ajax.php?action=delete expired. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit i...

5.8CVSS5.1AI score0.00332EPSS
SaveExploits0References6
Rows per page
Query Builder