SQL Injection in Mayurik Dawa-Pharma
CVE-2023-53734
dawa-pharma-1.0 allows unauthenticated attackers to execute SQL queries on the server, allowing them to access sensitive information and potentially gain administrative access.
Vulnerability class: SQL Injection
Published · last modified .
EPSS exploit prediction
EPSS: 0.005 (42.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 43rd percentile — 42.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Mayurik Dawa-Pharma — versions 1.0-2022
Weakness classification (CWE)
References
- www.exploit-db.com/exploits/51818 (exploit)
- www.mayurik.com/source-code/P0349/best-pharmacy-billing-software-free-download (product)
- github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/mayuri_k/2022/dawa-p… (issue-tracking, product)
- www.nu11secur1ty.com/ (product)
- www.vulncheck.com/advisories/dawa-pharma-10-sql-injection-via-email-parameter (third-party-advisory)