A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=delete…

A SQL injection vulnerability has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. The flaw exists in the /ajax.php file's delete_category function, where manipulation of the ID parameter leads to SQL injection. The vulnerability can be exploited remotely and exploit code has been publicly released. This affects the delete category functionality through AJAX requests. The high severity rating indicates significant risk to affected systems.