CVE-2026-104613
MediumCVSS 6.3Summary
A SQL injection vulnerability was discovered in CodeAstro Simple Pharmacy Management System 1.0 in the file /SimplePharmacy-PHP/product/view.php, affecting the ID argument. The attack can be performed remotely, and the exploit has been publicly disclosed.
Risk Assessment
An attacker can manipulate SQL queries, potentially leading to unauthorized access to data or modification of data in the system's database.
Recommendation
It is recommended to apply patches or update the system immediately, and to validate and sanitize the ID argument in view.php.
Other vulnerabilities in CodeAstro Simple Pharmacy Management System
Original NVD description (English source)
A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS