Vulnerabilities

Filters

2 selected

13 records

Sort

Vendor: Pharmacy Management System Project Component: Pharmacy Management System Clear all filters

TI-2024-07554 CVE-2024-8147 · GHSA-2f9w-93f5-cfhm

code-projects Pharmacy Management System index.php sql injection

MEDIUM 57

A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00611 Published 2024-08-25 No fix listed CWE-89

TI-2024-07553 CVE-2024-8146 · GHSA-g335-44rq-mchc

code-projects Pharmacy Management System index.php sql injection

MEDIUM 57

A vulnerability has been found in code-projects Pharmacy Management System 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0058 Published 2024-08-25 No fix listed CWE-89

TI-2024-07545 CVE-2024-8138 · GHSA-hrmq-f443-c64x

code-projects Pharmacy Management System Parameter index.php editManager sql injection

MEDIUM 57

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0058 Published 2024-08-25 No fix listed CWE-89

TI-2023-03875 CVE-2023-4186 · GHSA-89wf-f2fx-2rrq

SourceCodester Pharmacy Management System manage_website.php unrestricted upload

MEDIUM 44

A vulnerability was found in SourceCodester Pharmacy Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01048 Published 2023-08-06 No fix listed CWE-434

TI-2023-15106 CVE-2023-31519 · GHSA-266c-643c-jgc8

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

HIGH 82

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the email parameter at login_core.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0085 Published 2023-05-16 No fix listed CWE-89

TI-2023-00870 CVE-2023-0918 · GHSA-hw3p-w6g3-vfr2

codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload

MEDIUM 43

A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0072 Published 2023-02-19 No fix listed CWE-434

TI-2022-15718 CVE-2022-34950 · GHSA-m8wq-697q-2xpm

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editproduct.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-15717 CVE-2022-34949 · GHSA-84mq-285w-hw6j

Pharmacy Management System v1.0 was discovered to contain multiple SQL injection…

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the email or password parameter at login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-15716 CVE-2022-34948 · GHSA-gg7j-gqm7-94v2

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editbrand.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-15715 CVE-2022-34947 · GHSA-fpp7-489c-xrm5

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editcategory.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-15714 CVE-2022-34946 · GHSA-96wf-vf2q-86c7

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-15713 CVE-2022-34945 · GHSA-p45v-pjgh-wq3p

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-12970 CVE-2022-30887 · GHSA-2f9c-jj4r-fr8x

Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE)…

MEDIUM 64

Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editProductImage.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.26024 Published 2022-05-20 No fix listed CWE-434