CVE-2020-24862

The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases.

• CWE-89

• https://www.exploit-db.com/exploits/48752Exploit, Third Party Advisory, VDB Entry
• https://www.sourcecodester.com/download-code?nid=14398&title=Pharmacy%2FMedical+Store+%26+Sale+Point+Using+PHP%2FMySQL+with+Bootstrap+FrameworkThird Party Advisory
• https://www.sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.htmlThird Party Advisory
• https://www.exploit-db.com/exploits/48752Exploit, Third Party Advisory, VDB Entry
• https://www.sourcecodester.com/download-code?nid=14398&title=Pharmacy%2FMedical+Store+%26+Sale+Point+Using+PHP%2FMySQL+with+Bootstrap+FrameworkThird Party Advisory
• https://www.sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.htmlThird Party Advisory

Published

Jun 2, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-24848FruityWifi through 2.4 has an unsafe Sudo configuration [(AL…7.8
• CVE-2020-24849A remote code execution vulnerability is identified in Fruit…8.8
• CVE-2020-24855Directory Traversal vulnerability in easywebpack-cli before …5.3
• CVE-2020-24857Cross Site Scripting vulnerabilty found in IXPManager v.5.6.…6.1
• CVE-2020-24860CMS Made Simple 2.2.14 allows an authenticated user with acc…5.4
• CVE-2020-24861GetSimple CMS 3.3.16 allows in parameter 'permalink' on the …5.4
• CVE-2020-24863A memory corruption vulnerability was found in the kernel fu…5.5
• CVE-2020-24870Libraw before 0.20.1 has a stack buffer overflow via LibRaw:…8.8
• CVE-2020-24872Cross Site Scripting (XSS) vulnerability in backend/pages/mo…6.1
• CVE-2020-24876Use of a hard-coded cryptographic key in Pancake versions < …9.8
• CVE-2020-24877A SQL injection vulnerability in zzzphp v1.8.0 through /form…9.8
• CVE-2020-24881SSRF exists in osTicket before 1.14.3, where an attacker can…9.8