A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /ajax.php?action=save_ca…

A SQL injection vulnerability has been discovered in SourceCodester Pharmacy Sales and Inventory System version 1.0. The flaw affects the /ajax.php file with the save_category action, where manipulation of the ID parameter leads to SQL injection. The vulnerability can be exploited remotely and public exploits are available, making it actively exploitable. This represents a high-risk security issue for affected pharmacy management systems.