Security Advisory

CVE-2026-7282

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-28 13:30:17

Last updated 2026-04-28 15:21:54

Assigner VulDB

CVSS score 5.1

State PUBLISHED

Description

A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function delete_expired of the file /ajax.php?action=delete_expired. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

← Browse all CVEs View on cve.org ↗