cve/2020/CVE-2020-24862.md

CVE-2020-24862

Description

The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases.

POC

Reference

• https://www.exploit-db.com/exploits/48752
• https://www.exploit-db.com/exploits/48752

Github

No PoCs found on GitHub currently.