CVE-2024-8146: code-projects Pharmacy Management System index.php sql injection

Published Aug 25, 2024

Updated

A vulnerability has been found in code-projects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php?action=editSalesman. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Pharmacy Management System Project Pharmacy Management System=1.0

Event History

Aug 25, 2024

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

DescriptionSeverityWeakness

Jul 4, 56726

Event

via FIRST·01:16 PM

Frequently Asked Questions

What is the severity of CVE-2024-8146?

CVE-2024-8146 is classified as a critical vulnerability.

What kind of vulnerability is CVE-2024-8146?

CVE-2024-8146 is a SQL injection vulnerability affecting the Pharmacy Management System.

How does CVE-2024-8146 affect the Pharmacy Management System?

The vulnerability allows an attacker to manipulate the id argument in the /index.php?action=editSalesman file.

Who is affected by CVE-2024-8146?

CVE-2024-8146 affects users of Pharmacy Management System version 1.0.

How do I fix CVE-2024-8146?

To fix CVE-2024-8146, validate and sanitize all user inputs to the affected parameters.