CVE-2024-10140 PoC — Pharmacy Management System SQL注入漏洞

Source

https://github.com/holypryx/CVE-2024-10140

Associated Vulnerability

Title:Pharmacy Management System SQL注入漏洞 (CVE-2024-10140)
Description:Pharmacy Management System（MPMS）是Mayuri K.个人开发者的一个多语言药房管理系统。 Pharmacy Management System 1.0版本存在SQL注入漏洞，该漏洞源于/manage_supplier.php页面的id参数包含一个SQL注入漏洞。

Readme

# CVE-2024-10140

The script exploits a SQL Injection vulnerability found in the endpoint /php/manage_supplier.php?action=delete&id=32. The vulnerability allows an attacker to inject arbitrary SQL commands through the id parameter, potentially compromising the database and exposing sensitive information.

File Snapshot


 [4.0K]  /data/pocs/dc411bec72fd4ada82ed860bfdd9dc8c06938aef
├── [1.2K]  CVE-2024-10140.py
└── [ 306]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!