https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-7200.htmlhttps://patchthecve.com/cve/CVE-2025-7200.htmlWed, 17 Jun 2026 10:04:30 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in krishna9772 Pharmacy Management System up to a2efc8442931ec9308f3b4cf4778e5701153f4e5. Affected is an unknown function of the file quantity_upd.php. The manipulation of the argument med_name/med_cat/ex_date leads to sql injection. It ishttps://patchthecve.com/cve/CVE-2024-42562.htmlhttps://patchthecve.com/cve/CVE-2024-42562.htmlWed, 17 Jun 2026 07:49:39 +0000CRITICAL 9.8: Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at preview.php.https://patchthecve.com/cve/CVE-2024-42561.htmlhttps://patchthecve.com/cve/CVE-2024-42561.htmlWed, 17 Jun 2026 07:49:38 +0000HIGH 8.8: Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at sales_report.php.