Senior Walter Web-based pharmacy product management system

SourceCodester Web-based Pharmacy Product Management System Database Backup backup.php os command injection

SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload

SourceCodester Web-based Pharmacy Product Management System search_sales.php sql injection

SourceCodester Web-based Pharmacy Product Management System Login sql injection

SourceCodester Web-based Pharmacy Product Management System Create User Page add-admin.php unrestricted upload

SourceCodester Web-based Pharmacy Product Management System edit-photo.php unrestricted upload

SourceCodester Web-based Pharmacy Product Management System edit-product.php unrestricted upload

SourceCodester Web-based Pharmacy Product Management System edit-product.php sql injection

SourceCodester Web-based Pharmacy Product Management System search_stock. php sql injection

Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete-user.php) allows remote attackers to delete arbitrary user accounts via forged cross-origin GET requests because the endpoint relies solely on session cookies and lacks CSRF protection.

Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguised as an image by modifying the Content-Type header to image/jpg.

SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged (such as admin) sessions and perform sensitive operations such as adding new users.

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtqty" parameter during stock entry, allowing negative values to be processed. This causes the system to decrease the inventory level instead of increasing it, leading to inventory corruption and potential Denial of Service by depleting stock records.

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtprice" and "txttotalcost" parameters during stock entry, allowing negative financial values to be submitted. This leads to corruption of financial records, allowing attackers to manipulate inventory asset values and procurement costs.

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file. The application fails to verify if the requested sales quantity (txtqty) exceeds the available stock level. An attacker can manipulate the request to purchase a quantity that is significantly higher than the actual available stock.

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0. The vulnerability is located in the add-sales.php file. The application fails to validate the "txtprice" and "txttotalcost" parameters, allowing attackers to submit negative values for sales transactions. This leads to incorrect financial calculations, corruption of sales reports, and potential financial loss.

SourceCodester Web-based Pharmacy Product Management System session expiration

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add-admin.php via the Fullname text field.

SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in Category Management via the category name field.

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /product_expiry/add-supplier.php via the Supplier Name field.

SourceCodester Web-based Pharmacy Product Management System changepassword.php cross site scripting

SourceCodester Web-based Pharmacy Product Management System add-admin.php cross site scripting

SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scripting

SourceCodester Web-based Pharmacy Product Management System add-stock.php cross site scripting

SourceCodester Web-based Pharmacy Product Management System add-supplier.php cross site scripting

SourceCodester Web-based Pharmacy Product Management System add-category.php cross site scripting

SourceCodester Web-based Pharmacy Product Management System add-product.php cross site scripting

SourceCodester Web-based Pharmacy Product Management System Add User Page cross site scripting