Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Pharmacy Point of Sale System SQL Injection Vulnerability

CVE-2026-26706
Summary

The Pharmacy Point of Sale System version 1.0 has a security flaw in its 'view_receipt' function. This makes it possible for an attacker to access sensitive customer information. Update the system to a fixed version to prevent unauthorized access.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versionsFix available
oretnom23 pharmacy_point_of_sale_system 1.0 –
Original title
sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_receipt.php.
Original description
sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_receipt.php.
nvd CVSS3.1 9.8
Vulnerability type
CWE-89 SQL Injection
Published: 2 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026