CVE-2025-3823: SourceCodester Web-based Pharmacy Product Management System add-stock.php cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file add-stock.php. The manipulation of the argument txttotalcost/txtproductID/txtprice/txtexpirydate leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3823?
CVE-2025-3823 is classified as problematic due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-3823?
To fix CVE-2025-3823, ensure proper input validation and sanitization on the affected parameters in add-stock.php.
Which software is affected by CVE-2025-3823?
CVE-2025-3823 affects the SourceCodester Web-based Pharmacy Product Management System version 1.0.
What kind of attacks can CVE-2025-3823 facilitate?
CVE-2025-3823 can facilitate cross-site scripting (XSS) attacks that may compromise user data.
What are the vulnerable functions in CVE-2025-3823?
The vulnerable functions in CVE-2025-3823 are related to the handling of parameters like txttotalcost, txtproductID, txtprice, and txtexpirydate in add-stock.php.