CVE-2026-26705

The CVE-2026-26705 entry concerns sourcecodester Pharmacy Point of Sale System v1.0, vulnerable to SQL Injection in /pharmacy/view_product.php due to insufficient input validation. Documentation confirms the issue and impact (high confidentiality, integrity, and availability), with a CVSS v3.1 ba...

CVE-2026-26890

CVE-2026-26890 refers to a SQL Injection vulnerability in Sourcecodester Pharmacy Point of Sale System v1.0, exploitable via /pharmacy/manage_product.php. Multiple connected sources (NVD, Red Hat, CIRCL, CVE lists, EUVD, AttackersKB, etc.) consistently describe the issue as a SQL injection affect...

CVE-2026-26704

CVE-2026-26704 affects sourcecodester’s Pharmacy Point of Sale System v1.0. The linked Red Hat/NVD/other sources confirm a SQL Injection vulnerability in the /pharmacy/view_category.php endpoint (also referred to as /pharmacy/view category.php in some docs). Root cause: inadequate input sanitizat...

CVE-2026-26887

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_supplier.php. Multiple connected sources (Red Hat, NVD, CVE listing, ATT&CK not specified) confirm this vulnerability; no concrete exploit details or patches are provided in the supplied documents...

CVE-2026-26889

CVE-2026-26889 affects Sourcecodester Pharmacy Point of Sale System v1.0. The vulnerability is a SQL Injection in /pharmacy/manage_category.php, as described across NVD/Red Hat/CVE records. The public materials do not provide exploit specifics, affected versions beyond v1.0, or remediation steps....

CVE-2026-26707

CVE-2026-26707 affects sourcecodester Pharmacy Point of Sale System v1.0; vulnerable to SQL Injection in /pharmacy/view_supplier.php. Root cause: unsanitized input enabling injection. Impact: high confidentiality, integrity, and availability risk (CVSS 3.1: CRITICAL, network, no user interaction)...

CVE-2026-26708

Affected product: sourcecodester Pharmacy Point of Sale System v1.0. The vulnerability is SQL Injection in /pharmacy/manage_user.php due to improper input sanitization. Impact is described as CRITICAL (C/H, I/H, A/H; CVSS 3.1: 9.8) with Network attack vector, no privileges, no user interaction re...

CVE-2026-26706

CVE-2026-26706 affects sourcecodester Pharmacy Point of Sale System v1.0, with a SQL Injection in the /pharmacy/view_receipt.php component. The issue is caused by improper input handling, enabling an attacker to extract/modify data. The published CVSS 3.1 metrics indicate a CRITICAL impact (CVSS:...

CVE-2026-26888

Sourcecodester Pharmacy Point of Sale System v1.0 is affected by SQL Injection in /pharmacy/manage_stock.php. Root cause is unsanitized input in the SQL query. CVSS details (NVD) indicate a Network attack vector, Low base impact (C/L, I/N, A/N), with a base score of 2.7 and HIGH privileges requir...