CVE-2026-26705

The CVE-2026-26705 entry concerns sourcecodester Pharmacy Point of Sale System v1.0, vulnerable to SQL Injection in /pharmacy/view_product.php due to insufficient input validation. Documentation confirms the issue and impact (high confidentiality, integrity, and availability), with a CVSS v3.1 ba...

CVE-2026-26890

The Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection within the /pharmacy/manage_product.php file. This vulnerability arises from the improper neutralization of special elements used in an SQL command. Exploitation details are not provided in the documents, but a p...

CVE-2026-26704

CVE-2026-26704 affects sourcecodester’s Pharmacy Point of Sale System v1.0. The linked Red Hat/NVD/other sources confirm a SQL Injection vulnerability in the /pharmacy/view_category.php endpoint (also referred to as /pharmacy/view category.php in some docs). Root cause: inadequate input sanitizat...

CVE-2026-26887

The Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to an SQL Injection flaw located in the /pharmacy/manage_supplier.php file. This vulnerability arises from the improper neutralization of special elements used in an SQL command. While the impact is categorized as Low with Partia...

CVE-2026-26708

Affected product: sourcecodester Pharmacy Point of Sale System v1.0. The vulnerability is SQL Injection in /pharmacy/manage_user.php due to improper input sanitization. Impact is described as CRITICAL (C/H, I/H, A/H; CVSS 3.1: 9.8) with Network attack vector, no privileges, no user interaction re...

CVE-2026-26707

CVE-2026-26707 affects sourcecodester Pharmacy Point of Sale System v1.0; vulnerable to SQL Injection in /pharmacy/view_supplier.php. Root cause: unsanitized input enabling injection. Impact: high confidentiality, integrity, and availability risk (CVSS 3.1: CRITICAL, network, no user interaction)...

CVE-2026-26888

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to an SQL Injection flaw located in the /pharmacy/manage_stock.php file. This vulnerability arises from the improper neutralization of special elements used in an SQL command. Exploitation details and specific remediation steps are n...

CVE-2026-26889

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection within the /pharmacy/manage_category.php file. This vulnerability stems from the improper neutralization of special elements used in an SQL command. Exploitation details are not provided in the documents, though a pr...

CVE-2026-26706

CVE-2026-26706 affects sourcecodester Pharmacy Point of Sale System v1.0, with a SQL Injection in the /pharmacy/view_receipt.php component. The issue is caused by improper input handling, enabling an attacker to extract/modify data. The published CVSS 3.1 metrics indicate a CRITICAL impact (CVSS:...