CVE-2024-10140 PoC — code-projects Pharmacy Management System manage_supplier.php sql injection

Source

https://github.com/holypryx/CVE-2024-10140

Associated Vulnerability

Title: code-projects Pharmacy Management System manage_supplier.php sql injection (CVE-2024-10140)
Description:A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affected by this issue is some unknown functionality of the file /manage_supplier.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Readme

# CVE-2024-10140

The script exploits a SQL Injection vulnerability found in the endpoint /php/manage_supplier.php?action=delete&id=32. The vulnerability allows an attacker to inject arbitrary SQL commands through the id parameter, potentially compromising the database and exposing sensitive information.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →