PT-2026-22658 · Sourcecodester · Pharmacy Point Of Sale System

Thirtypenny77 · Published 2026-03-02 · Updated 2026-03-06 · CVE-2026-26707

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sourcecodester Pharmacy Point of Sale System version 1.0

Description The software is susceptible to SQL Injection through the /pharmacy/view supplier.php endpoint. The view supplier.php file is vulnerable to this issue. The vulnerability allows for potential unauthorized access or manipulation of data within the system.

Recommendations Apply updates or patches to address the SQL Injection issue in the /pharmacy/view supplier.php file.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-26707

Affected Products

Pharmacy Point Of Sale System

References · 9

• 🔥 https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/pharmacy-point-sale-system/SQL-4.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-26707 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26707 · Vendor Advisory
• https://twitter.com/cracbot/status/2029512435837935774 · Twitter Post
• https://twitter.com/infoflowcloud/status/2028533565319746012 · Twitter Post
• https://t.me/cveNotify/153972 · Telegram Post
• https://twitter.com/cracbot/status/2029874899989528668 · Twitter Post
• https://twitter.com/CVEnew/status/2028532410816630973 · Twitter Post
• https://t.me/cveNotify/154036 · Telegram Post