CVE-2020-24862

HIGH 7.5CVE-2020-24862 · Published 02/06/2021 · updated 17/06/2026

In short

CVE-2020-24862 is a HIGH (CVSS 7.5) vulnerability affecting pharmacy medical store and sale point (pharmacy medical store and sale point project).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pharmacy medical store and sale point pharmacy_medical_store_and_sale_point_project	`= 1.0`	No fix yet

Description

The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases.

References

exploit-db.com/exploits/48752 · Exploit
sourcecodester.com/download-code · Third Party Advisory
sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free