CVE-2026-7194: SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=saveproduct. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7194?
CVE-2026-7194 is classified as a high-severity SQL injection vulnerability.
How do I fix CVE-2026-7194?
To fix CVE-2026-7194, sanitize and validate all inputs in the ajax.php file to prevent SQL injection attacks.
What versions are affected by CVE-2026-7194?
CVE-2026-7194 affects version 1.0 of the SourceCodester Pharmacy Sales and Inventory System.
How does CVE-2026-7194 exploit the system?
CVE-2026-7194 exploits the system by manipulating the 'ID' argument in the Ajax request to perform unauthorized SQL queries.
What are the potential impacts of CVE-2026-7194?
The potential impacts of CVE-2026-7194 include data leakage, unauthorized data manipulation, or complete system compromise.