Skip to content
Threat Feed
Subscribe

Product

Pharmacy Sales and Inventory System

1 brief RSS
critical advisory

SourceCodester Pharmacy Sales and Inventory System SQL Injection Vulnerability

CVE-2026-6187 is a remote SQL injection vulnerability in SourceCodester Pharmacy Sales and Inventory System 1.0 via the ID parameter in /ajax.php?action=chk_prod_availability, allowing unauthenticated attackers to execute arbitrary SQL queries.

Pharmacy Sales and Inventory System sqli vulnerability web-application
2r 1t 1c