PatchTheCVE: pharmacy management systemhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-7200: A vulnerability, which was classified as critical, was found in krishna9772 Pharmacy Management System up to ahttps://patchthecve.com/cve/CVE-2025-7200.htmlhttps://patchthecve.com/cve/CVE-2025-7200.htmlWed, 17 Jun 2026 10:04:30 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in krishna9772 Pharmacy Management System up to a2efc8442931ec9308f3b4cf4778e5701153f4e5. Affected is an unknown function of the file quantity_upd.php. The manipulation of the argument med_name/med_cat/ex_date leads to sql injection. It isCVE-2025-4888: A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2025-4888.htmlhttps://patchthecve.com/cve/CVE-2025-4888.htmlWed, 17 Jun 2026 09:34:14 +0000MEDIUM 5.3: A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. This affects the function medicineType::take_order of the component Add Order Details. The manipulation leads to buffer overflow. An attack has to be approached locally. The exploit has beenCVE-2025-4811: A vulnerability was found in CodeAstro Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2025-4811.htmlhttps://patchthecve.com/cve/CVE-2025-4811.htmlWed, 17 Jun 2026 09:34:03 +0000HIGH 7.3: A vulnerability was found in CodeAstro Pharmacy Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack may be launched remotCVE-2024-10197: A vulnerability was found in code-projects Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-10197.htmlhttps://patchthecve.com/cve/CVE-2024-10197.htmlWed, 17 Jun 2026 06:55:08 +0000LOW 2.4: A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /manage_supplier.php of the component Manage Supplier Page. The manipulation of the argument address leads to cross site scripting. It is possCVE-2024-10196: A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as criticalhttps://patchthecve.com/cve/CVE-2024-10196.htmlhttps://patchthecve.com/cve/CVE-2024-10196.htmlWed, 17 Jun 2026 06:55:08 +0000MEDIUM 6.3: A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /add_new_invoice.php. The manipulation of the argument text leads to sql injection. The attack may be initiated remotely. The exploit has been CVE-2024-10140: A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System https://patchthecve.com/cve/CVE-2024-10140.htmlhttps://patchthecve.com/cve/CVE-2024-10140.htmlWed, 17 Jun 2026 06:55:00 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affected by this issue is some unknown functionality of the file /manage_supplier.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. TCVE-2024-10139: A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-10139.htmlhttps://patchthecve.com/cve/CVE-2024-10139.htmlWed, 17 Jun 2026 06:54:59 +0000MEDIUM 6.3: A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add_new_supplier.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploCVE-2024-10138: A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-10138.htmlhttps://patchthecve.com/cve/CVE-2024-10138.htmlWed, 17 Jun 2026 06:54:59 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. Affected is an unknown function of the file /add_new_purchase.php?action=is_supplier. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. TheCVE-2024-10137: A vulnerability was found in code-projects Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-10137.htmlhttps://patchthecve.com/cve/CVE-2024-10137.htmlWed, 17 Jun 2026 06:54:59 +0000MEDIUM 6.3: A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /manage_medicine.php?action=delete. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The eCVE-2024-10136: A vulnerability was found in code-projects Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-10136.htmlhttps://patchthecve.com/cve/CVE-2024-10136.htmlWed, 17 Jun 2026 06:54:59 +0000MEDIUM 6.3: A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage_invoice.php. The manipulation of the argument invoice_number leads to sql injection. The attack can be initiated remotely. The explCVE-2024-10024: A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System https://patchthecve.com/cve/CVE-2024-10024.htmlhttps://patchthecve.com/cve/CVE-2024-10024.htmlWed, 17 Jun 2026 06:54:47 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. This issue affects some unknown processing of the file /php/manage_medicine_stock.php. The manipulation of the argument name/packing/generic_name/suppliers_name leads to sql injection. CVE-2024-10023: A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-10023.htmlhttps://patchthecve.com/cve/CVE-2024-10023.htmlWed, 17 Jun 2026 06:54:47 +0000MEDIUM 6.3: A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /php/add_new_medicine.php. The manipulation of the argument name/packing/generic_name/suppliers_name leads to sql injection. The attack can be initiatCVE-2024-10022: A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-10022.htmlhttps://patchthecve.com/cve/CVE-2024-10022.htmlWed, 17 Jun 2026 06:54:47 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/manage_supplier.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The exCVE-2024-10021: A vulnerability was found in code-projects Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-10021.htmlhttps://patchthecve.com/cve/CVE-2024-10021.htmlWed, 17 Jun 2026 06:54:46 +0000MEDIUM 6.3: A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /php/manage_purchase.php?action=search&tag=VOUCHER_NUMBER. The manipulation of the argument text leads to sql injection. The attaCVE-2024-9976: A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-9976.htmlhttps://patchthecve.com/cve/CVE-2024-9976.htmlWed, 17 Jun 2026 08:25:37 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/manage_customer.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The exCVE-2024-9814: A vulnerability, which was classified as critical, was found in Codezips Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-9814.htmlhttps://patchthecve.com/cve/CVE-2024-9814.htmlWed, 17 Jun 2026 08:25:18 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in Codezips Pharmacy Management System 1.0. Affected is an unknown function of the file product/update.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been discCVE-2024-9813: A vulnerability, which was classified as critical, has been found in Codezips Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-9813.htmlhttps://patchthecve.com/cve/CVE-2024-9813.htmlWed, 17 Jun 2026 08:25:18 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in Codezips Pharmacy Management System 1.0. This issue affects some unknown processing of the file product/register.php. The manipulation of the argument category leads to sql injection. The attack may be initiated remotely. The exploCVE-2024-8366: A vulnerability was found in code-projects Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-8366.htmlhttps://patchthecve.com/cve/CVE-2024-8366.htmlWed, 17 Jun 2026 08:22:26 +0000MEDIUM 4.3: A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?id=userProfileEdit of the component Update My Profile Page. The manipulation of the argument fname/lname/email with the input <script>CVE-2024-8147: A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as criticalhttps://patchthecve.com/cve/CVE-2024-8147.htmlhttps://patchthecve.com/cve/CVE-2024-8147.htmlWed, 17 Jun 2026 08:21:59 +0000MEDIUM 6.3: A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php?action=editPharmacist. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploitCVE-2024-8146: A vulnerability has been found in code-projects Pharmacy Management System 1.0 and classified as criticalhttps://patchthecve.com/cve/CVE-2024-8146.htmlhttps://patchthecve.com/cve/CVE-2024-8146.htmlWed, 17 Jun 2026 08:21:59 +0000MEDIUM 6.3: A vulnerability has been found in code-projects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php?action=editSalesman. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploitCVE-2024-8138: A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0https://patchthecve.com/cve/CVE-2024-8138.htmlhttps://patchthecve.com/cve/CVE-2024-8138.htmlWed, 17 Jun 2026 08:21:58 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. Affected is the function editManager of the file /index.php?action=editManager of the component Parameter Handler. The manipulation of the argument id as part of String leads to sql injectioCVE-2024-42562: Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoihttps://patchthecve.com/cve/CVE-2024-42562.htmlhttps://patchthecve.com/cve/CVE-2024-42562.htmlWed, 17 Jun 2026 07:49:39 +0000CRITICAL 9.8: Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at preview.php.CVE-2024-42561: Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoihttps://patchthecve.com/cve/CVE-2024-42561.htmlhttps://patchthecve.com/cve/CVE-2024-42561.htmlWed, 17 Jun 2026 07:49:38 +0000HIGH 8.8: Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at sales_report.php.