PT-2025-17402 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System
Lingze
·
Published
2025-04-20
·
Updated
2025-04-24
·
CVE-2025-3821
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SourceCodester Web-based Pharmacy Product Management System version 1.0
Description
A vulnerability was found in the SourceCodester Web-based Pharmacy Product Management System. This issue affects the file add-admin.php and is related to the manipulation of the arguments
txtpassword, txtfullname, and txtemail, which leads to cross-site scripting. The attack can be initiated remotely.Recommendations
For version 1.0, consider disabling the
add-admin.php file or restricting access to it until a patch is available. As a temporary workaround, avoid using the arguments txtpassword, txtfullname, and txtemail in the affected file to minimize the risk of exploitation.Exploit
Fix
XSS
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sourcecodester Web-Based Pharmacy Product Management System