SourceCodester Web-based Pharmacy Product Management System 1.0 contains a SQL injection vulnerability in the /product_expiry/edit-admin.php file. The vulnerability arises from manipulation of the ID argument, allowing remote attackers to execute SQL injection attacks. Exploit code is publicly available. The vulnerability has a CVSS 3.1 score of 6.3, indicating a medium severity level.