ZeroHour

CVE-2025-56274

PoC
CVSS 3.1
8.1 high
EPSS
<1%p35
Published
()
Modified
Description

SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged (such as admin) sessions and perform sensitive operations such as adding new users.

Vendors
senior-walter
Products
web-based pharmacy product management system
Weakness
CWE-284
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

In the news

No ingested article mentions this CVE yet.