CVE-2025-56274

CVSS 8.1v3.1pub. 2025-09-15upd. 2026-07-05

SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged (such as admin) sessions and perform sensitive operations such as adding new users.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Senior Walter Web Based Pharmacy Product Management System
APP
Senior-Walter
1.0

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

CWE

NVD-CWE-noinfo

CWE-284

References

github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56274.md…

Related vulnerabilities

CVE-2026-30573HIGH7.5ten sam produkt

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0. The vulnerabil...

CVE-2026-30576HIGH7.5ten sam produkt

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stoc...

CVE-2026-30575HIGH7.5ten sam produkt

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stoc...

CVE-2026-30574HIGH7.5ten sam produkt

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sale...

CVE-2025-63712HIGH8.8ten sam produkt

Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management modu...

CVE-2025-56274

Senior Walter Web Based Pharmacy Product Management System

Related vulnerabilities