47 matches found
Pharmacy Management System getsalereport.php SQL Injection Vulnerability
Pharmacy Management System MPMS is a multi-lingual pharmacy management system by Mayuri K. Personal developer. version v1.0 of Pharmacy Management System is vulnerable to SQL injection, which stems from the startDate parameter in getsalereport.php parameter in getsalereport.php lacks validation f...
CVE-2022-34946
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php...
CVE-2022-34945
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php...
CVE-2022-34951
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php...
CVE-2022-34951
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php...
CVE-2022-34953
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php...
CVE-2022-34945
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php...
CVE-2022-34946
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php...
CVE-2022-34953
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php...
CVE-2022-34946
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php...
CVE-2022-34945
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php...
Sql injection
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php...
Sql injection
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php...
Sql injection
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php...
CVE-2022-34951
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php...
CVE-2022-34946
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php...
CVE-2022-34945
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php...
CVE-2022-34945
Pharmacy Management System v1.0 contains a SQL injection vulnerability in getproductreport.php via the startDate parameter. The issue stems from unsanitized external input in the SQL query, enabling an attacker to potentially execute arbitrary SQL and exfiltrate data. Public references describe i...
PT-2022-22450 · Unknown · Pharmacy Management System
Name of the Vulnerable Software and Affected Versions: Pharmacy Management System version 1.0 Description: A SQL injection issue was found in the Pharmacy Management System. The vulnerability can be exploited via the startDate parameter at the "getsalereport.php" endpoint. Recommendations: For...
CVE-2022-34946: Improper Neutralization of Special Elements used in an SQL Command
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php...