zhi-cyber/cve-2

zhi-cyber/cve-2

Releases0
CVE Vulnerability Reproduction Process

CVE History

CVEPublishedCVSS v3CVSS v2
7.3 HIGH7.5 HIGH

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /ajax.php?action=save_user. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.