Priority HIGH 78
Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00508 · Published 2025-05-28 · No fix listed CWE-434
Priority HIGH 73
SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00417 · Published 2025-10-10 · No fix listed CWE-284
Priority HIGH 72
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0026 · Published 2026-03-27 · No fix listed CWE-20
Priority HIGH 72
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00429 · Published 2026-03-27 · No fix listed CWE-1284
Priority HIGH 72
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0026 · Published 2026-03-27 · No fix listed CWE-841
Priority HIGH 72
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0026 · Published 2026-04-01 · No fix listed CWE-1284
Priority HIGH 71
Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00229 · Published 2025-11-10 · No fix listed CWE-352
Priority HIGH 70
SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged (such as admin) sessions and perform sensitive operati…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00427 · Published 2025-09-15 · No fix listed CWE-284
Priority HIGH 70
A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.01246 · Published 2025-05-16 · No fix listed CWE-548
Priority HIGH 70
A vulnerability classified as critical was found in SourceCodester Online Student Clearance System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00639 · Published 2025-05-06 · No fix listed CWE-74
Priority HIGH 70
A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.03259 · Published 2025-04-16 · No fix listed CWE-77
Priority HIGH 70
A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00639 · Published 2025-04-16 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00652 · Published 2025-04-07 · No fix listed CWE-74
Priority HIGH 65
A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00534 · Published 2025-04-16 · No fix listed CWE-74
Priority MEDIUM 60
Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /product_expiry/add-supplier.php via the Supplier Name field.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00241 · Published 2025-12-02 · No fix listed CWE-79
Priority MEDIUM 60
SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in Category Management via the category name field.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00228 · Published 2025-09-30 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability, which was classified as problematic, has been found in SourceCodester Online Student Clearance System 1.0.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00352 · Published 2025-05-18 · No fix listed CWE-352
Priority MEDIUM 57
A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00982 · Published 2025-04-18 · No fix listed CWE-284
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00563 · Published 2025-04-17 · No fix listed CWE-284
Priority MEDIUM 57
A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00563 · Published 2025-04-17 · No fix listed CWE-284
Priority MEDIUM 57
A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00534 · Published 2025-04-16 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00575 · Published 2025-04-04 · No fix listed CWE-284
Priority MEDIUM 56
A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.0025 · Published 2026-03-08 · No fix listed CWE-79
Priority MEDIUM 55
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00389 · Published 2025-05-11 · No fix listed CWE-79
Priority MEDIUM 55
A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00647 · Published 2025-05-09 · No fix listed CWE-79
Load more
THREATIST.IORead the docs