PT-2025-16781 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SourceCodester Web-based Pharmacy Product Management System version 1.0
Description
A critical issue was found in the system, affecting the file /search/search stock.php. The manipulation of the
Name argument leads to SQL injection. This issue can be initiated remotely.Recommendations
For version 1.0, consider restricting access to the /search/search stock.php file until a fix is available. As a temporary workaround, avoid using the
Name argument in the affected file to minimize the risk of exploitation.Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sourcecodester Web-Based Pharmacy Product Management System