CVE Vulnerabilities

CVE-2025-56274

Published: Sep 15, 2025 | Modified: Sep 18, 2025
CVSS 3.x
8.1
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged (such as admin) sessions and perform sensitive operations such as adding new users.

Affected Software

Name Vendor Start Version End Version
Web-based_pharmacy_product_management_system Seniorwalter 1.0 (including) 1.0 (including)

References