| शीर्षक | code-projects Pharmacy Management System 1.0 SQL Injection |
|---|
| विवरण | A critical SQL injection vulnerability has been discovered in the **Pharmacy Management System** version 1.0, specifically in the **invoice deletion functionality**. This flaw occurs when the `invoice_number` parameter, used to delete an invoice, is not properly sanitized. Attackers can manipulate the parameter through a **GET** request, injecting arbitrary SQL commands that compromise the database’s security and integrity.
If successfully exploited, this vulnerability allows attackers to delete essential invoice records, exposing sensitive data or disrupting financial operations. Since no patch is currently available, this issue poses a severe risk and requires immediate remediation to prevent data breaches or system instability. |
|---|
| स्रोत | ⚠️ https://gist.github.com/higordiego/f6411aecc606b015a37382b2be828831 |
|---|
| उपयोगकर्ता | c4ttr4ck (UID 75518) |
|---|
| सबमिशन | 16/10/2024 11:32 PM (2 साल पहले) |
|---|
| संयम | 18/10/2024 06:21 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 280924 [code-projects Pharmacy Management System 1.0 /manage_invoice.php invoice_number SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|