A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtprice" and "txttotalcost" parameters during stock entry, allowing negative financial values to be submitted. This leads to corruption of financial records, allowing attackers to manipulate inventory asset values and procurement costs.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NSenior Walter Web Based Pharmacy Product Management System
APPSenior-Walter1.0
Related vulnerabilities
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0. The vulnerabil...
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stoc...
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sale...
Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management modu...
SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, whi...