SourceCodester Web-based Pharmacy Product Management System vulnerabilities
3 known CVE vulnerabilities in SourceCodester Web-based Pharmacy Product Management System, translated and rated.
- CVE-2026-7746Medium
A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0, affecting an unknown function of the /product_expiry/edit-admin.php file. Manipulation of the ID argument leads to SQL injection, and the attack can be launched remotely. The exploit is publicly available and might be used.
- CVE-2025-65215Medium
Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /product_expiry/add-supplier.php via the Supplier Name field. User-supplied input is not properly sanitized.
- CVE-2025-56274High
SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, allowing low-privileged users to forge high-privileged (e.g., admin) sessions and perform sensitive operations such as adding new users.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS