Krishna9772
Monthly
SQL injection in Pharmacy Management System's quantity_upd.php allows low-privileged authenticated attackers to extract or modify limited data via unsanitized med_name, med_cat, or ex_date parameters. Public exploit code exists, but a low EPSS score and CVSS 4.0 base score of 2.1 indicate negligible real-world exploitation probability. No versioned patch is available due to the project's rolling release model.
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at preview.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at sales_report.php. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection in Pharmacy Management System's quantity_upd.php allows low-privileged authenticated attackers to extract or modify limited data via unsanitized med_name, med_cat, or ex_date parameters. Public exploit code exists, but a low EPSS score and CVSS 4.0 base score of 2.1 indicate negligible real-world exploitation probability. No versioned patch is available due to the project's rolling release model.
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at preview.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at sales_report.php. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.