CVE-2026-7126: SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /ajax.php?action=savecategory. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7126?
CVE-2026-7126 has a critical severity rating due to the potential for SQL injection attacks.
How do I fix CVE-2026-7126?
To fix CVE-2026-7126, validate and sanitize user inputs in the ajax.php file, particularly in the save_category action.
What systems are affected by CVE-2026-7126?
CVE-2026-7126 affects SourceCodester Pharmacy Sales and Inventory System version 1.0.
What type of vulnerability is CVE-2026-7126?
CVE-2026-7126 is classified as an SQL injection vulnerability.
Can CVE-2026-7126 lead to data breaches?
Yes, CVE-2026-7126 can lead to unauthorized access and data breaches if exploited.