Back to Database
Status published
High
CVE-2023-53734
dawa-pharma-1.0 - SQL Injection via Email Parameter
Vulnerability Description
dawa-pharma-1.0 allows unauthenticated attackers to execute SQL queries on the server, allowing them to access sensitive information and potentially gain administrative access.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-53734
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- nu11secur1ty
References
- https://www.exploit-db.com/exploits/51818
- https://www.mayurik.com/source-code/P0349/best-pharmacy-billing-software-free-download
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/mayuri_k/2022/dawa-pharma-1.0-2022
- https://www.nu11secur1ty.com/
- https://www.vulncheck.com/advisories/dawa-pharma-10-sql-injection-via-email-parameter
Affected Vendor
mayurik
View all reports →Affected Software
dawa-pharma
Vulnerable Versions:
1.0-2022
Timeline
Official Publish:
December 4th, 2025
Last Modified:
April 7th, 2026
Added to House:
July 22nd, 2026