PT-2025-37767 · Seniorwalter · Web-Based Pharmacy Product Management System

Chen1-Boop · Publicado 2025-09-15 · Atualizado 2025-12-23 · CVE-2025-56274

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Web-based Pharmacy Product Management System version 1.0

Description The software contains an Incorrect Access Control issue. This allows users with limited privileges to create sessions with higher privileges, such as those of an administrator. This enables them to perform sensitive actions, including adding new users.

Recommendations Apply appropriate access controls to prevent low-privileged users from forging high-privileged sessions.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2025-56274

Produtos afetados

Web-Based Pharmacy Product Management System

Referências · 5

• 🔥 https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56274.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-56274 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2003567354727264322 · Publicação no Twitter
• http://sourcecodester.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-56274 · Nota de Segurança