Description
dawa-pharma-1.0 allows unauthenticated attackers to execute SQL queries on the server, allowing them to access sensitive information and potentially gain administrative access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mayurik | dawa-pharma | 1.0-2022 | — |
References
- ExploitDB-51818 exploit
- Mayuri K Pharmacy Billing Software product
- GitHub Repository for CVE-nu11secur1ty product issue-tracking
- nu11secur1ty Home Page product
- https://www.vulncheck.com/advisories/dawa-pharma-10-sql-injection-via-email-parameter third-party-advisory