Good find. Since it is not a Web App and hence not publicly available to exploit: Use of String.Format instead Parameterized queries is how Sql injection issu

Good find. Since it is not a Web App and hence not publicly available to exploit: Use of String.Format instead Parameterized queries is how Sql injection issues sneak in. (Line 63, https://github.com/katway/DrugSupervision/blob/GuiDesign/DrugSupervise/ScannerForm.cs https://github.com/katway/DrugSupervision/blob/GuiDesign/Dru...)