CVE-2024-42562

CVE-2024-42562 affects Pharmacy Management System, version a2efc8. A SQL injection vulnerability exists in the invoice_number parameter of preview.php, reported across multiple sources. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields a base score of 9.8 (CRITICAL), with potential...

CVE-2024-42561

The CVE-2024-42561 entry describes a SQL injection vulnerability in Pharmacy Management System (commit a2efc8) via the invoice_number parameter in sales_report.php. What is affected: Pharmacy Management System, specific commit a2efc8. Root cause: SQL injection in the invoice_number parameter expo...

CVE-2025-7200

CVE-2025-7200 affects krishna9772 Pharmacy Management System up to a2efc8442931ec9308f3b4cf4778e5701153f4e5. The vulnerability is a SQL injection in the quantity_upd.php file, caused by improper handling of the med_name/med_cat/ex_date arguments. It is described as remotely exploitable with a pub...