CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-4186 – SourceCodester Pharmacy Management System manage_website.php unrestricted upload
https://notcve.org/view.php?id=CVE-2023-4186
A vulnerability was found in SourceCodester Pharmacy Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_website.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. • https://github.com/E1even-321/Pharmacy-system/blob/main/Pharmacy%20Management%20System%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf https://vuldb.com/?ctiid.236221 https://vuldb.com/?id.236221 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-31519
https://notcve.org/view.php?id=CVE-2023-31519
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the email parameter at login_core.php. • https://github.com/yangliukk/Injection-Vulnerability-In-Pharmacy-Management-System-1.0/blob/main/README.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-0918 – codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload
https://notcve.org/view.php?id=CVE-2023-0918
A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://blog.0xgabe.com/?p=71 https://vuldb.com/?ctiid.221494 https://vuldb.com/?id.221494 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-34950
https://notcve.org/view.php?id=CVE-2022-34950
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editproduct.php. Se ha detectado que Pharmacy Management System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del parámetro id en el archivo editproduct.php • https://www.yuque.com/jiryu/yz4rcd/iwd521 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-34949
https://notcve.org/view.php?id=CVE-2022-34949
Pharmacy Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the email or password parameter at login.php. Se ha detectado que Pharmacy Management System versión v1.0, contiene múltiples vulnerabilidades de inyección SQL por medio del parámetro email o password en el archivo login.php • https://www.yuque.com/jiryu/yz4rcd/gam02x • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •