CVE-2025-56274: High severity Sourcecodester Web-based Pharmacy Product Management System vulnerability
SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged (such as admin) sessions and perform sensitive operations such as adding new users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-56274?
CVE-2025-56274 is considered a critical vulnerability due to its potential to allow unauthorized administrative access through incorrect access control.
How do I fix CVE-2025-56274?
To fix CVE-2025-56274, update to the latest version of the SourceCodester Web-based Pharmacy Product Management System that addresses access control issues.
What types of operations can be performed due to CVE-2025-56274?
Due to CVE-2025-56274, low-privileged users can perform sensitive operations such as adding new users or altering system configurations.
Who is affected by CVE-2025-56274?
Users of the SourceCodester Web-based Pharmacy Product Management System 1.0 are affected by CVE-2025-56274.
Is CVE-2025-56274 being actively exploited?
As of now, there are no confirmed reports of CVE-2025-56274 being actively exploited, but due to its severity, immediate mitigation is recommended.