CVE-2026-7130: SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletecategory. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7130?
CVE-2026-7130 is classified as a high severity vulnerability due to the potential for SQL injection.
How do I fix CVE-2026-7130?
To fix CVE-2026-7130, you should validate and sanitize user input, especially the ID parameter in the ajax.php file.
What systems are affected by CVE-2026-7130?
CVE-2026-7130 affects SourceCodester Pharmacy Sales and Inventory System version 1.0.
What type of vulnerability is CVE-2026-7130?
CVE-2026-7130 is an SQL injection vulnerability that can allow attackers to manipulate database queries.
Is there a patch available for CVE-2026-7130?
Currently, there is no known patch for CVE-2026-7130, so the recommended action is to apply input validation.