Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:web-based_pharmacy_product_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductWeb Based Pharmacy Product Management System (5d5c2488-3de8-55bb-a4e2-68a7860bc575)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7746 vulnerable 2026-06-08 08:08:57.640950 SourceCodester Web-based Pharmacy Product Management System edit-admin.php sql injection
MEDIUM (6.3)
A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file /product_expiry/edit-admin.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Published: 2026-05-04T08:00:13.659Z
Updated: 2026-05-04T17:49:44.281Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4013 vulnerable 2026-06-08 08:05:12.497185 SourceCodester Web-based Pharmacy Product Management System add_admin.php improper authorization
MEDIUM (6.3)
A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown function of the file add_admin.php. Such manipulation leads to improper authorization. The attack may be launched remotely.
Published: 2026-03-12T08:02:07.851Z
Updated: 2026-03-12T13:36:20.462Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3766 vulnerable 2026-06-08 08:01:19.344292 SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scripting
LOW (3.5)
A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-03-08T20:02:11.306Z
Updated: 2026-03-10T20:41:38.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3401 vulnerable 2026-06-08 08:01:18.567862 SourceCodester Web-based Pharmacy Product Management System session expiration
LOW (3.1)
A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote exploitation of the attack is possible. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks.
Published: 2026-03-02T00:02:10.449Z
Updated: 2026-03-02T15:40:51.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4547 vulnerable 2026-06-08 07:29:16.427160 SourceCodester Web-based Pharmacy Product Management System Add User Page cross site scripting
LOW (2.4)
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add User Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected.
Published: 2025-05-11T21:00:07.162Z
Updated: 2025-05-12T18:56:07.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3826 vulnerable 2026-06-08 07:23:09.947029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3825 vulnerable 2026-06-08 07:23:09.946679 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3824 vulnerable 2026-06-08 07:23:09.946176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3823 vulnerable 2026-06-08 07:23:09.945692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3822 vulnerable 2026-06-08 07:23:09.945233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3821 vulnerable 2026-06-08 07:23:09.944861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3783 vulnerable 2026-06-08 07:23:09.879697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3765 vulnerable 2026-06-08 07:23:09.858496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3764 vulnerable 2026-06-08 07:23:09.857969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3729 vulnerable 2026-06-08 07:23:09.730030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3697 vulnerable 2026-06-08 07:23:09.662080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3696 vulnerable 2026-06-08 07:23:09.661515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3694 vulnerable 2026-06-08 07:23:09.660863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3383 vulnerable 2026-06-08 07:23:08.756242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3244 vulnerable 2026-06-08 07:23:08.527870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.