Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Web-based Pharmacy Product Management System — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in Web-based Pharmacy Product Management System, with AI-generated Chinese analysis, references, and POCs.

This page provides a curated aggregation of weaknesses affecting the Web-based Pharmacy Product Management System, focusing on security vulnerabilities identified across various versions of the software. It collects a comprehensive range of vulnerability reports, including injection flaws, broken access control, and data exposure issues that impact the integrity and confidentiality of pharmacy operations. The data covers entries from January 2015 through to the most recent disclosures in 2024, ensuring a historical perspective on the product's security posture over time. Visitors to this page can effectively track vendor advisories related to this specific product line, allowing stakeholders to stay informed about ongoing remediation efforts and patch availability. Users can also gain a deeper understanding of common weakness classes frequently exploited in pharmaceutical management contexts, such as those defined by CWE taxonomy, to better assess risk within their own environments. Furthermore, the repository serves as a lookup tool for a product’s vulnerability history, enabling developers, security auditors, and compliance officers to review past incidents, identify recurring patterns, and evaluate the long-term stability of the system’s codebase. This centralized view supports proactive security management by highlighting critical gaps and facilitating informed decision-making regarding updates and mitigations. By consolidating these disparate data points, the page aims to simplify the process of maintaining secure pharmacy operations and reducing exposure to known threats.

Vendor: SourceCodester

CVE IDTitleCVSSSeverityPublished
CVE-2026-7746 SourceCodester Web-based Pharmacy Product Management System edit-admin.php sql injection CWE-89 6.3 Medium2026-05-04
CVE-2026-4013 SourceCodester Web-based Pharmacy Product Management System add_admin.php improper authorization CWE-285 6.3 Medium2026-03-12
CVE-2026-3766 SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scripting CWE-79 3.5 Low2026-03-08
CVE-2026-3401 SourceCodester Web-based Pharmacy Product Management System session expiration CWE-613 3.1 Low2026-03-02
CVE-2025-4547 SourceCodester Web-based Pharmacy Product Management System Add User Page cross site scripting CWE-79 2.4 Low2025-05-11
CVE-2025-3826 SourceCodester Web-based Pharmacy Product Management System add-supplier.php cross site scripting CWE-79 2.4 Low2025-04-20
CVE-2025-3825 SourceCodester Web-based Pharmacy Product Management System add-category.php cross site scripting CWE-79 2.4 Low2025-04-20
CVE-2025-3824 SourceCodester Web-based Pharmacy Product Management System add-product.php cross site scripting CWE-79 2.4 Low2025-04-20
CVE-2025-3823 SourceCodester Web-based Pharmacy Product Management System add-stock.php cross site scripting CWE-79 2.4 Low2025-04-20
CVE-2025-3822 SourceCodester Web-based Pharmacy Product Management System changepassword.php cross site scripting CWE-79 2.4 Low2025-04-20
CVE-2025-3821 SourceCodester Web-based Pharmacy Product Management System add-admin.php cross site scripting CWE-79 2.4 Low2025-04-20
CVE-2025-3783 SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload CWE-434 6.3 Medium2025-04-18
CVE-2025-3765 SourceCodester Web-based Pharmacy Product Management System edit-photo.php unrestricted upload CWE-434 6.3 Medium2025-04-17
CVE-2025-3764 SourceCodester Web-based Pharmacy Product Management System edit-product.php unrestricted upload CWE-434 6.3 Medium2025-04-17
CVE-2025-3729 SourceCodester Web-based Pharmacy Product Management System Database Backup backup.php os command injection CWE-78 7.3 High2025-04-16
CVE-2025-3697 SourceCodester Web-based Pharmacy Product Management System edit-product.php sql injection CWE-89 6.3 Medium2025-04-16
CVE-2025-3696 SourceCodester Web-based Pharmacy Product Management System search_stock. php sql injection CWE-89 6.3 Medium2025-04-16
CVE-2025-3694 SourceCodester Web-based Pharmacy Product Management System Login sql injection CWE-89 7.3 High2025-04-16
CVE-2025-3383 SourceCodester Web-based Pharmacy Product Management System search_sales.php sql injection CWE-89 7.3 High2025-04-07
CVE-2025-3244 SourceCodester Web-based Pharmacy Product Management System Create User Page add-admin.php unrestricted upload CWE-434 6.3 Medium2025-04-04

All 20 known CVE vulnerabilities affecting Web-based Pharmacy Product Management System with full Chinese analysis, references, and POCs where available.