CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-42561
https://notcve.org/view.php?id=CVE-2024-42561
20 Aug 2024 — Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at sales_report.php. • https://gist.github.com/topsky979/5d2d9104dc4dd7f5dda99cbbd615a0b8 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-4186 – SourceCodester Pharmacy Management System manage_website.php unrestricted upload
https://notcve.org/view.php?id=CVE-2023-4186
06 Aug 2023 — A vulnerability was found in SourceCodester Pharmacy Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_website.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. • https://github.com/E1even-321/Pharmacy-system/blob/main/Pharmacy%20Management%20System%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2023-31519
https://notcve.org/view.php?id=CVE-2023-31519
16 May 2023 — Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the email parameter at login_core.php. • https://github.com/yangliukk/Injection-Vulnerability-In-Pharmacy-Management-System-1.0/blob/main/README.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-0918 – codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload
https://notcve.org/view.php?id=CVE-2023-0918
19 Feb 2023 — A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://blog.0xgabe.com/?p=71 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2022-34950
https://notcve.org/view.php?id=CVE-2022-34950
02 Aug 2022 — Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editproduct.php. Se ha detectado que Pharmacy Management System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del parámetro id en el archivo editproduct.php • https://www.yuque.com/jiryu/yz4rcd/iwd521 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2022-34949
https://notcve.org/view.php?id=CVE-2022-34949
02 Aug 2022 — Pharmacy Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the email or password parameter at login.php. Se ha detectado que Pharmacy Management System versión v1.0, contiene múltiples vulnerabilidades de inyección SQL por medio del parámetro email o password en el archivo login.php • https://www.yuque.com/jiryu/yz4rcd/gam02x • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2022-34948
https://notcve.org/view.php?id=CVE-2022-34948
02 Aug 2022 — Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editbrand.php. Se ha detectado que Pharmacy Management System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del parámetro id en el archivo editbrand.php • https://www.yuque.com/jiryu/yz4rcd/egcp1e • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2022-34947
https://notcve.org/view.php?id=CVE-2022-34947
02 Aug 2022 — Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editcategory.php. Se ha detectado que Pharmacy Management System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del parámetro id en el archivo editcategory.php • https://www.yuque.com/jiryu/yz4rcd/tcug0q • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2022-34946
https://notcve.org/view.php?id=CVE-2022-34946
02 Aug 2022 — Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php. Se ha detectado que Pharmacy Management System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del parámetro startDate en el archivo getexpproduct.php • https://www.yuque.com/jiryu/yz4rcd/vz4009 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2022-34945
https://notcve.org/view.php?id=CVE-2022-34945
02 Aug 2022 — Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php. Se ha detectado que Pharmacy Management System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del parámetro startDate en el archivo getproductreport.php • https://www.yuque.com/jiryu/yz4rcd/qlf4ty • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •