CVE-2026-7549: SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=deletecustomer. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7549?
The severity of CVE-2026-7549 is critical due to the potential for SQL injection attacks that could compromise the database.
How do I fix CVE-2026-7549?
To fix CVE-2026-7549, validate and sanitize all user inputs, especially the ID parameter in the delete_customer action.
What systems are affected by CVE-2026-7549?
CVE-2026-7549 affects SourceCodester Pharmacy Sales and Inventory System version 1.0.
What type of vulnerability is CVE-2026-7549?
CVE-2026-7549 is classified as an SQL injection vulnerability.
Can CVE-2026-7549 lead to data breaches?
Yes, CVE-2026-7549 can lead to data breaches if attackers exploit the SQL injection flaw to access sensitive information.