PT-2026-22664 · Sourcecodester · Pharmacy Point Of Sale System

Thirtypenny77 · CVE-2026-26705 · Published 2026-03-02 · Updated 2026-03-06

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sourcecodester Pharmacy Point of Sale System version 1.0

Description The sourcecodester Pharmacy Point of Sale System version 1.0 is susceptible to SQL Injection through the /pharmacy/view product.php endpoint. The vulnerability exists due to insufficient input validation, potentially allowing an attacker to manipulate database queries. The vulnerable parameter is not specified.

Recommendations Apply updates to address the SQL Injection issue in the /pharmacy/view product.php endpoint.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-26705

Affected Products

Pharmacy Point Of Sale System

References · 10

• 🔥 https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/pharmacy-point-sale-system/SQL-2.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-26705 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26705 · Vendor Advisory
• https://twitter.com/infoflowcloud/status/2028533549381374419 · Twitter Post
• https://twitter.com/CVEnew/status/2028532409042432053 · Twitter Post
• https://twitter.com/cracbot/status/2029512432566366257 · Twitter Post
• https://t.me/cveNotify/153954 · Telegram Post
• https://t.me/cveNotify/153970 · Telegram Post
• https://twitter.com/cracbot/status/2029874896252326121 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2028596520782573984 · Twitter Post