CVE-2026-7282

Published April 28th, 2026

View on NVD ↗

CVSS v3

4.7

MEDIUM

CVSS v2

5.8

MEDIUM

Affected

PROJECT

Description

A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function delete_expired of the file /ajax.php?action=delete_expired. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

CDipper/CVE-Test

CVE

GitHub