CVE-2026-7549 in Pharmacy Sales and Inventory System

Zusammenfassung

von MITRE • 01.05.2026

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=delete_customer. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Zuständig: VulDB
• Veröffentlichung: 01.05.2026
• Moderieren: akzeptiert
• Eintrag: VDB-360359
• CPE: bereit
• CWE: CWE-89 (bestätigt)
• Exploit: Download
• CVSS: 7.3 (VulDB)
• EPSS: 0.00043
• KEV: nein
• Aktivitäten: very low

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-7549
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-7549
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-7549/