PT-2026-29535 · Sourcecodester · Pharmacy Product Management System

Published 2026-04-01 · Updated 2026-04-01 · CVE-2026-30573

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Pharmacy Product Management System version 1.0

Description A business logic flaw exists in the add-sales.php file of the application. The application does not validate the txtprice and txttotalcost parameters, allowing submission of negative values. This can result in incorrect financial calculations, corrupted sales reports, and potential financial loss.

Recommendations Ensure proper validation of the txtprice and txttotalcost parameters to prevent negative values from being submitted.

Exploit

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2026-30573

Affected Products

Pharmacy Product Management System

References · 3

• 🔥 https://github.com/meifukun/Web-Security-PoCs/blob/main/Pharmacy-Product-Management-System/Logic-AddSales-NegativePrice.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30573 · Security Note
• https://twitter.com/CVEnew/status/2039372084267106612 · Twitter Post