Khairulazly760530-Cell

**Name of the Vulnerable Software and Affected Versions** SourceCodester Pharmacy Sales and Inventory System version 1.0 **Description** An issue exists in the '/ajax.php?action=save customer' endpoint where manipulation of the `ID` argument allows for SQL injection, a technique used to interfere with the queries that an application makes to its database. This attack can be initiated remotely. **Recommendations** Avoid using the `ID` parameter in the '/ajax.php?action=save customer' endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.