PT-2026-38554 · Sourcecodester · Pharmacy Sales/Inventory System

Xiaozhi · Published 2026-05-07 · Updated 2026-05-07 · CVE-2026-8083

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /ajax.php?action=save user. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-8083

Affected Products

Pharmacy Sales/Inventory System

References · 6

• 🔥 https://github.com/zhi-cyber/cve-2/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-8083 · Security Note
• https://vuldb.com/vuln/361837/cti · Note
• https://vuldb.com/submit/807848 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/361837 · Note