# SourceCodester Pharmacy Sales and Inventory System.

Every CVE that names SourceCodester Pharmacy Sales and Inventory System among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [SourceCodester Pharmacy Sales and Inventory System ShowForm.php sell_statement access control](https://agentprime.io/advisories/CVE-2026-10255.md)
  `CVE-2026-10255` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation, Broken access control
- [SourceCodester Pharmacy Sales and Inventory System Supplier Creation export create_supplier csv injection](https://agentprime.io/advisories/CVE-2026-10248.md)
  `CVE-2026-10248` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.1 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Other injection
- [SourceCodester Pharmacy Sales and Inventory System main create_generic_name cross site scripting](https://agentprime.io/advisories/CVE-2026-10247.md)
  `CVE-2026-10247` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.1 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Pharmacy Sales and Inventory System main create_medicine_presentation cross site scripting](https://agentprime.io/advisories/CVE-2026-10246.md)
  `CVE-2026-10246` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.1 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Pharmacy Sales and Inventory System main create_supplier cross site scripting](https://agentprime.io/advisories/CVE-2026-10245.md)
  `CVE-2026-10245` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.1 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Pharmacy Sales and Inventory System main create_medicine_name cross site scripting](https://agentprime.io/advisories/CVE-2026-10244.md)
  `CVE-2026-10244` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.1 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Pharmacy Sales and Inventory System index.php users cross site scripting](https://agentprime.io/advisories/CVE-2026-8136.md)
  `CVE-2026-8136` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 4.8 Medium · Not analysed yet · Published 8 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php save_user sql injection](https://agentprime.io/advisories/CVE-2026-8083.md)
  `CVE-2026-8083` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 7 May 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php save_customer sql injection](https://agentprime.io/advisories/CVE-2026-7550.md)
  `CVE-2026-7550` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 1 May 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection](https://agentprime.io/advisories/CVE-2026-7549.md)
  `CVE-2026-7549` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 1 May 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection](https://agentprime.io/advisories/CVE-2026-7392.md)
  `CVE-2026-7392` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php save_supplier sql injection](https://agentprime.io/advisories/CVE-2026-7391.md)
  `CVE-2026-7391` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting](https://agentprime.io/advisories/CVE-2026-7390.md)
  `CVE-2026-7390` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.1 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php save_expired sql injection](https://agentprime.io/advisories/CVE-2026-7283.md)
  `CVE-2026-7283` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.1 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php delete_expired sql injection](https://agentprime.io/advisories/CVE-2026-7282.md)
  `CVE-2026-7282` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.1 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System index.php supplier cross site scripting](https://agentprime.io/advisories/CVE-2026-7281.md)
  `CVE-2026-7281` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 4.8 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting](https://agentprime.io/advisories/CVE-2026-7269.md)
  `CVE-2026-7269` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 4.8 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting](https://agentprime.io/advisories/CVE-2026-7200.md)
  `CVE-2026-7200` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7199.md)
  `CVE-2026-7199` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7194.md)
  `CVE-2026-7194` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7130.md)
  `CVE-2026-7130` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting](https://agentprime.io/advisories/CVE-2026-7129.md)
  `CVE-2026-7129` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7128.md)
  `CVE-2026-7128` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7127.md)
  `CVE-2026-7127` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7126.md)
  `CVE-2026-7126` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7088.md)
  `CVE-2026-7088` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7087.md)
  `CVE-2026-7087` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-6189.md)
  `CVE-2026-6189` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-6188.md)
  `CVE-2026-6188` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: Other injection, SQL injection
- [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-6187.md)
  `CVE-2026-6187` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: Other injection, SQL injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=sourcecodester-pharmacy-sales-and-inventory-system>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/sourcecodester-pharmacy-sales-and-inventory-system/>. Everything for agents: <https://agentprime.io/llms.txt>.