CVE-2024-36673

CRITICAL

Sourcecodester Pharmacy/Medical Store POS 1.0 - SQL Injection

Title source: llm

Description

Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Third Party Advisory

https://github.com/CveSecLook/cve/issues/39

Scores

CVSS v3 9.8

EPSS 0.0052

EPSS Percentile 40.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-89

Status published

Products (1)

pharmacy\/medical_store_point_of_sale_system_project/pharmacy\/medical_store_point_of_sale_system 1.0

Published Jun 07, 2024

Tracked Since Feb 18, 2026