High severity7.5NVD Advisory· Published Jun 2, 2021· Updated Jun 17, 2026
CVE-2020-24862
CVE-2020-24862
Description
The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:pharmacy_medical_store_and_sale_point_project:pharmacy_medical_store_and_sale_point:1.0:*:*:*:*:*:*:*
- Range: = 1.0
- Range: = 1.0
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/48752nvdExploitThird Party AdvisoryVDB Entry
- www.sourcecodester.com/download-codenvdThird Party Advisory
- www.sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.