CyberRota Analysis
AI-GeneratedThe Online Medicine Delivery System 1.0 is vulnerable to SQL injection through the loadResultList function in the Product Detail Page, specifically when manipulating the ID argument in the /index.php?q=single-item endpoint. This vulnerability allows remote attackers to execute arbitrary SQL queries, potentially compromising the integrity and confidentiality of the database. Organizations using this system should prioritize patching this vulnerability to mitigate the risk of data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=single-item of the component Product Detail Page. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.