PT-2026-45394 · Sourcecodester · Pharmacy Sales/Inventory System

Timeflies · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-10248

Mitre

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System up to 1.0. This issue affects the function create supplier of the file /Export csv/export of the component Supplier Creation Interface. This manipulation of the argument Address/Company Name causes csv injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

Special Elements Injection

RCE

Weakness Enumeration

CWE-74

CWE-1236

Related Identifiers

CVE-2026-10248

Affected Products

Pharmacy Sales/Inventory System

References · 7

• 🔥 https://github.com/timeflies123/cve/issues/6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10248 · Security Note
• https://vuldb.com/cve/CVE-2026-10248 · Note
• https://vuldb.com/vuln/367526/cti · Note
• https://vuldb.com/vuln/367526 · Note
• https://vuldb.com/submit/824029 · Note
• https://sourcecodester.com · Note