Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:pharmacy_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductPharmacy Management System (c876ec69-e61a-5fdb-9bfc-3e4da2fa994c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4888 vulnerable 2026-06-08 07:29:17.464123 code-projects Pharmacy Management System Add Order Details take_order buffer overflow
MEDIUM (5.3)
A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. This affects the function medicineType::take_order of the component Add Order Details. The manipulation leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-05-18T17:00:08.256Z
Updated: 2025-05-19T15:22:17.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9976 vulnerable 2026-06-08 07:00:28.991856 code-projects Pharmacy Management System manage_customer.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/manage_customer.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-15T11:00:09.138Z
Updated: 2024-10-15T13:27:12.958Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8366 vulnerable 2026-06-08 07:00:24.377803 code-projects Pharmacy Management System Update My Profile Page index.php cross site scripting
MEDIUM (4.3)
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?id=userProfileEdit of the component Update My Profile Page. The manipulation of the argument fname/lname/email with the input <script>alert(1)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-31T18:00:04.959Z
Updated: 2024-09-03T13:57:48.125Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10198 vulnerable 2026-06-08 06:22:03.771450 code-projects Pharmacy Management System Manage Customer Page manage_customer.php cross site scripting
LOW (2.4)
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /manage_customer.php of the component Manage Customer Page. The manipulation of the argument suppliers_name/address leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting files to be affected. Other parameters might be affected as well.
Published: 2024-10-21T01:00:06.467Z
Updated: 2024-10-21T18:57:04.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10197 vulnerable 2026-06-08 06:22:03.770695 code-projects Pharmacy Management System Manage Supplier Page manage_supplier.php cross site scripting
LOW (2.4)
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /manage_supplier.php of the component Manage Supplier Page. The manipulation of the argument address leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2024-10-21T00:31:03.601Z
Updated: 2024-10-21T18:58:20.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10196 vulnerable 2026-06-08 06:22:03.770208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10140 vulnerable 2026-06-08 06:22:03.642478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10139 vulnerable 2026-06-08 06:22:03.641717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10138 vulnerable 2026-06-08 06:22:03.640971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10137 vulnerable 2026-06-08 06:22:03.640364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10136 vulnerable 2026-06-08 06:22:03.639857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10024 vulnerable 2026-06-08 06:22:03.380101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10023 vulnerable 2026-06-08 06:22:03.379339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10022 vulnerable 2026-06-08 06:22:03.378513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10021 vulnerable 2026-06-08 06:22:03.377228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.