5.3
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Basic Information
ID
CVE-2026-5812
Source
VulDB
Published
Apr 8, 2026 at 22:30
Modified
Apr 9, 2026 at 16:16
Affected Product
Vendor
SourceCodester
Product
Pharmacy Product Management System
Version
1.0
Affected Versions
SourceCodester Pharmacy Product Management System 1.0