PT-2025-19708 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Published 2025-05-05 · Updated 2025-05-05 · CVE-2025-45751

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Web Based Pharmacy Product Management System version 1.0

Description The issue concerns Cross Site Scripting (XSS) in the add-admin.php file via the Fullname text field. This allows for potential malicious script injection.

Recommendations For SourceCodester Web Based Pharmacy Product Management System version 1.0, consider validating and sanitizing user input in the Fullname field to prevent XSS attacks. As a temporary workaround, restrict access to the add-admin.php file until a proper fix is implemented.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-45751

Affected Products

Sourcecodester Web-Based Pharmacy Product Management System

References · 7

• 🔥 https://github.com/sw8y/vulnerability_research/blob/main/CVE-2025-45751/CVE-2025-45751.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-45751 · Security Note
• https://osv.dev/vulnerability/CVE-2025-45751 · Vendor Advisory
• https://t.me/cvedetector/24455 · Telegram Post
• https://t.me/cvetracker/23043 · Telegram Post
• https://twitter.com/CVEnew/status/1919389749732634776 · Twitter Post
• https://sourcecodester.com/php/17883/web-based-product-alert-system.html · Note