Vulnerabilities (CVE)

Filtered by vendor Netart Media Subscribe
Filtered by product Pharmacy System
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-3433 1 Netart Media 1 Pharmacy System 2023-12-10 7.5 HIGH N/A
SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter in an add action.
CVE-2007-3434 1 Netart Media 1 Pharmacy System 2023-12-10 5.0 MEDIUM N/A
index.php in Pharmacy System 2 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the page parameter, which reveals the table prefix in an error message.