Paper/Archive/CVE-2024-36673

CVE-2024-36673

sourcecodester pharmacymedical_store_point_of_sale_system — Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php.

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP, NVD agree)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 44.5.445 × 208.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

pharmacymedical_store_point_of_sale_system1.0–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/CveSecLook/cve/issues/39