CVE-2022-30407

Name of the Vulnerable Software and Affected Versions Pharmacy Sales And Inventory System version 1.0

Description The issue allows for SQL Injection via the /pharmacy-sales-and-inventory-system/manage user.php API endpoint, specifically through the id variable. This could potentially lead to unauthorized access or manipulation of data.

Recommendations For Pharmacy Sales And Inventory System version 1.0, consider validating and sanitizing user input for the id variable in the /pharmacy-sales-and-inventory-system/manage user.php endpoint to prevent SQL Injection attacks. As a temporary workaround, restrict access to this endpoint until a proper fix is implemented.