Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-7200: Pharmacy Sales and Inventory System 1.0: Remote Code Execution Risk
CVE-2026-7200 · published 6 months ago
Summary
The Pharmacy Sales and Inventory System 1.0 is at risk if a hacker can manipulate data sent to it. This could allow a hacker to take control of your website and potentially steal sensitive information or disrupt your business. To protect your system, ensure you're running the latest version and consider implementing additional security measures.
Original advisory text
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=types. Executing a manipulation of ...
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=types. Executing a manipulation of the argument ID can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
2.1
Low
Type
CWE-79Cross-site Scripting (XSS)
CWE-94Code Injection
Timeline
Published28 Apr 2026
Updated3 Nov 2026
First seen28 Apr 2026
Sources
CVE-2026-7200 · NVD
Track software like this
Free during beta