CVE-2026-7392: SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection
A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function deletesupplier of the file /ajax.php?action=deletesupplier. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7392?
The severity of CVE-2026-7392 is classified as high due to its potential for SQL injection that can compromise database integrity.
How do I fix CVE-2026-7392?
To fix CVE-2026-7392, validate and sanitize all user inputs in the delete_supplier function within ajax.php to prevent unauthorized SQL execution.
Which systems are affected by CVE-2026-7392?
CVE-2026-7392 affects SourceCodester Pharmacy Sales and Inventory System version 1.0.
What is the impact of CVE-2026-7392?
The impact of CVE-2026-7392 allows attackers to execute arbitrary SQL commands, potentially leading to data leakage or corruption.
Are there any known exploits for CVE-2026-7392?
Yes, there are known exploits for CVE-2026-7392 that leverage the vulnerability in the delete_supplier functionality.