A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /php/add_new_medicine.php. The manipulation of the argument name/packing/generic_name/suppliers_name leads to sql injection.

This vulnerability was named CVE-2024-10023. The attack can be initiated remotely. Furthermore, there is an exploit available.