What is CVE-2024-36673?

CVE-2024-36673 is a critical-severity vulnerability in Pharmacy\/medical Store Point Of Sale System Project, classified under SQL Injection. CVSS score: 9.8/10. Published 2024-06-07.

How severe is CVE-2024-36673?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Pharmacy\/medical Store Point Of Sale System Project

CVE-2024-36673

Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries.

Vulnerability class: SQL Injection

EPSS: 0.005 (42.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Pharmacy\/medical_store_point_of_sale_system_project Pharmacy\/medical_store_point_of_sale_system — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2024-36673?: CVE-2024-36673 is a critical-severity vulnerability in Pharmacy\/medical Store Point Of Sale System Project, classified under SQL Injection. CVSS score: 9.8/10. Published 2024-06-07.
How severe is CVE-2024-36673?: Critical severity. CVSS v3 base score is 9.8 out of 10.