medium4.7
CVE-2026-10248
A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System up to 1.0.
Impact
A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System up to 1.0. This issue affects the function create_supplier of the file /Export_csv/export of the component Supplier Creation Interface. This manipulation of the argument Address/Company Name causes csv injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| SourceCodester | SourceCodester Pharmacy Sales And Inventory System | before 1.0. |
Versions were read from the advisory text. No structured product data has been published for this record yet.