CVE-2026-5812
Business Logic Error in SourceCodester Pharmacy add-sales.php (Remote
Publication date: 2026-04-08
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| sourcecodester | pharmacy_product_management_system | 1.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-840 | Business Logic Errors |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a security flaw in the SourceCodester Pharmacy Product Management System 1.0, specifically in the add-sales.php file within the POST Parameter Handler component. It involves manipulation of the txtqty argument, which leads to business logic errors. The flaw can be exploited remotely, and the exploit code has been publicly released.
How can this vulnerability impact me? :
Exploiting this vulnerability can cause business logic errors in the affected system. This may lead to incorrect processing of sales data or other unintended behaviors within the pharmacy product management system. Since the exploit is publicly available and can be initiated remotely, attackers could potentially disrupt business operations or manipulate sales records.