PT-2026-22665 · Sourcecodester · Pharmacy Point Of Sale System

Thirtypenny77 · Published 2026-03-02 · Updated 2026-03-06 · CVE-2026-26706

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sourcecodester Pharmacy Point of Sale System version 1.0

Description The software is susceptible to a SQL Injection issue. This flaw is located in the /pharmacy/view receipt.php component. The vulnerability allows for potential unauthorized access to or modification of data within the system. The vulnerable parameter is not specified.

Recommendations Apply updates to address the SQL Injection issue in the /pharmacy/view receipt.php component.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-26706

Affected Products

Pharmacy Point Of Sale System

References · 10

• 🔥 https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/pharmacy-point-sale-system/SQL-3.md · Exploit
• https://osv.dev/vulnerability/CVE-2026-26706 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26706 · Security Note
• https://twitter.com/infoflowcloud/status/2028533574769447118 · Twitter Post
• https://twitter.com/cracbot/status/2029512434197958764 · Twitter Post
• https://twitter.com/CVEnew/status/2028532409923244453 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2028591400913166774 · Twitter Post
• https://twitter.com/cracbot/status/2029874898089431047 · Twitter Post
• https://t.me/cveNotify/154035 · Telegram Post
• https://t.me/cveNotify/153971 · Telegram Post