
- DavaIndia Pharmacy flaw let unauthenticated users create “super admin” accounts with full privileges
- Exposed sensitive customer data tied to orders, including health conditions, medications, and personal details
- Bug responsibly disclosed in 2024, fixed by late 2025; no evidence of malicious exploitation, customer data likely secure