PatchTheCVE: medicine tracker system projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-30112: Medicine Tracker System in PHP 1.0.0 is vulnerable to SQL Injection.https://patchthecve.com/cve/CVE-2023-30112.htmlhttps://patchthecve.com/cve/CVE-2023-30112.htmlWed, 17 Jun 2026 05:54:11 +0000HIGH 7.5: Medicine Tracker System in PHP 1.0.0 is vulnerable to SQL Injection.CVE-2023-30111: Medicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting (XSS).https://patchthecve.com/cve/CVE-2023-30111.htmlhttps://patchthecve.com/cve/CVE-2023-30111.htmlWed, 17 Jun 2026 05:54:11 +0000MEDIUM 6.1: Medicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-30106: Sourcecodester Medicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting (XSS) via page=abouthttps://patchthecve.com/cve/CVE-2023-30106.htmlhttps://patchthecve.com/cve/CVE-2023-30106.htmlWed, 17 Jun 2026 05:54:11 +0000MEDIUM 6.1: Sourcecodester Medicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting (XSS) via page=about.CVE-2023-30458: A username enumeration issue was discovered in Medicine Tracker System 1.0https://patchthecve.com/cve/CVE-2023-30458.htmlhttps://patchthecve.com/cve/CVE-2023-30458.htmlWed, 17 Jun 2026 05:54:45 +0000MEDIUM 5.3: A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of the CVE-2023-1464: A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0https://patchthecve.com/cve/CVE-2023-1464.htmlhttps://patchthecve.com/cve/CVE-2023-1464.htmlWed, 17 Jun 2026 05:28:01 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=save_user. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is possiblCVE-2023-1447: A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker Systemhttps://patchthecve.com/cve/CVE-2023-1447.htmlhttps://patchthecve.com/cve/CVE-2023-1447.htmlWed, 17 Jun 2026 05:27:58 +0000LOW 3.5: A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown functionality of the file app/?page=medicines/manage_medicine. The manipulation of the argument name/description with the input <script>alert('2'CVE-2023-1439: A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.https://patchthecve.com/cve/CVE-2023-1439.htmlhttps://patchthecve.com/cve/CVE-2023-1439.htmlWed, 17 Jun 2026 05:27:57 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/view_details.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. The