A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=save…

A SQL injection vulnerability has been discovered in SourceCodester Pharmacy Sales and Inventory System version 1.0. The vulnerability affects the /ajax.php file with the save_sales action, where manipulation of the ID parameter leads to SQL injection. The attack can be performed remotely and the exploit has been publicly released, making it available for potential attacks. This represents a high-risk security flaw in pharmacy management software.