CVE-2026-7282: SourceCodester Pharmacy Sales and Inventory System ajax.php delete_expired sql injection
A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function deleteexpired of the file /ajax.php?action=deleteexpired. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7282?
CVE-2026-7282 is considered a high severity vulnerability due to its SQL injection nature, which can lead to unauthorized data access.
How do I fix CVE-2026-7282?
To fix CVE-2026-7282, you need to sanitize and validate all user inputs in the delete_expired function of ajax.php.
Which software is affected by CVE-2026-7282?
CVE-2026-7282 affects version 1.0 of the SourceCodester Pharmacy Sales and Inventory System.
Can CVE-2026-7282 be exploited remotely?
Yes, CVE-2026-7282 can potentially be exploited remotely if the attacker has access to the affected application's delete_expired function.
What kind of attack is CVE-2026-7282 related to?
CVE-2026-7282 is related to SQL injection attacks, which allow attackers to manipulate database queries.