Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-10024 EUVD-2024-32874GHSA-8p7f-wrwf-vh3p

code-projects Pharmacy Management System manage_medicine_stock.php sql injection

Published Oct 16, 2024 · Updated Oct 16, 2024 · Assigned by VulDB

Description

A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. This issue affects some unknown processing of the file /php/manage_medicine_stock.php. The manipulation of the argument name/packing/generic_name/suppliers_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

VendorProductAffectedFixed
code-projects Pharmacy Management System 1.0 —

References