CVE-2024-10196

CVE-2024-10196 affects code-projects Pharmacy Management System 1.0. A vulnerability exists in the handling of the text parameter in the file /add_new_invoice.php, where improper input handling enables SQL injection. The issue may be exploited remotely and exploitation has been publicly disclosed...

CVE-2024-10140

The CVE-2024-10140 entry affects code-projects’ Pharmacy Management System 1.0, with the vulnerability located in /manage_supplier.php. The root cause is an SQL injection caused by manipulating the id parameter, enabling remote exploitation. Public exploit details exist (e.g., a GitHub exploit ta...

CVE-2024-9976

CVE-2024-9976 affects code-projects Pharmacy Management System 1.0. The vulnerability is a SQL injection in the file /php/manage_customer.php?action=search (and related /php/manage_customer.php endpoints) caused by unsanitized input in the text parameter, exploitable remotely and publicly disclos...

CVE-2024-10021

CVE-2024-10021 affects Code-Projects Pharmacy Management System 1.0. The vulnerability resides in /php/manage_purchase.php?action=search&tag=VOUCHER_NUMBER, where manipulating the tag parameter leads to SQL injection. Descriptions indicate the attack could be launched remotely and that the exploi...

CVE-2024-10022

The CVE-2024-10022 entry refers to code-projects Pharmacy Management System 1.0, with a SQL injection in /php/manage_supplier.php?action=search caused by unsafely handling the text parameter. A remote attacker can exploit this (publicly disclosed) to execute arbitrary SQL. Several connected sourc...

CVE-2024-10138

CVE-2024-10138 affects code-projects Pharmacy Management System v1.0. The vulnerability is an SQL injection in the endpoint /add_new_purchase.php?action=is_supplier, triggered by manipulating the name/argument parameter. This allows remote exploitation and is described as a critical issue in mult...

CVE-2024-10139

CVE-2024-10139 affects code-projects Pharmacy Management System 1.0. The vulnerability is a SQL injection in the /add_new_supplier.php page, triggered by manipulation of the name parameter. The issue is exploitable remotely and an exploit has been disclosed publicly. Affected functionality is des...

CVE-2024-10137

CVE-2024-10137 affects Code-Projects Pharmacy Management System 1.0. The vulnerability is an SQL injection caused by manipulating the id parameter in the endpoint "/manage_medicine.php?action=delete". It may be exploitable remotely and has been described as critical in the initial report. Multipl...

CVE-2024-10136

The CVE-2024-10136 entry affects code-projects Pharmacy Management System 1.0, with a vulnerability in /manage_invoice.php where the invoice_number parameter enables SQL injection. This is described as exploitable remotely and publicly disclosed. Connected sources corroborate an SQL injection fla...