Web-based Pharmacy Product Management System vulnerabilities
7 known vulnerabilities in Web-based Pharmacy Product Management System from Senior-walter. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Web-based Pharmacy Product Management System: Improper Validation of Specified Quantity in Input
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0. The vulnerability is located in the add-sales.php file. The application fails to validate the "txtprice" and "txttotalcost" parameters, allowing attackers to submit
- 7.5 High severity
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0…
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtprice" and "txttotalcost" parameters during stock entry, allowing negative financial values to b
- 7.5 High severity
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0…
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtqty" parameter during stock entry, allowing negative values to be processed. This causes the sys
- 7.5 High severity
Web-based Pharmacy Product Management System: Improper Enforcement of Behavioral Workflow
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file. The application fails to verify if the requested sales quantity (txtqty) exceeds the available stock level. An attacker can manipulate the
- 8.8 High severity
Web-based Pharmacy Product Management System: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete-user.php) allows remote attackers to delete arbitrary user accounts via forged cross-origin GET requests because the endpoint relies solely
- 8.1 High severity
Web-based Pharmacy Product Management System: Improper Access Control
SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged (such as admin) sessions and perform sensitive operations such as adding new users.
- 8.6 High severity
Web-based Pharmacy Product Management System: Unrestricted Upload of File with Dangerous Type
Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguised as an image by modifying the Content-Type header to image/jpg.