CVE-2026-7549 in Pharmacy Sales and Inventory System

Сводка

по MITRE • 01.05.2026

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=delete_customer. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Ответственный: VulDB
• Раскрытие: 01.05.2026
• Модерация: принято
• Вход: VDB-360359
• CPE: готов
• CWE: CWE-89 (Подтверждённый)
• Эксплойт: Скачать
• CVSS: 7.3 (VulDB)
• EPSS: 0.00043
• KEV: Нет
• Деятельности: Очень низкий

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-7549
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-7549
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-7549/