CVE-2026-30573: High severity Sourcecodester Pharmacy Product Management System vulnerability
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0. The vulnerability is located in the add-sales.php file. The application fails to validate the "txtprice" and "txttotalcost" parameters, allowing attackers to submit negative values for sales transactions. This leads to incorrect financial calculations, corruption of sales reports, and potential financial loss.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-30573?
CVE-2026-30573 is classified as a business logic vulnerability that can significantly impact the integrity of financial transactions within the application.
How do I fix CVE-2026-30573?
To mitigate CVE-2026-30573, implement input validation for the "txtprice" and "txttotalcost" parameters to disallow negative values.
What software is affected by CVE-2026-30573?
CVE-2026-30573 affects SourceCodester Pharmacy Product Management System version 1.0.
What type of attack can be executed using CVE-2026-30573?
An attacker can exploit CVE-2026-30573 by submitting negative values for sales transactions, leading to financial discrepancies.
Is CVE-2026-30573 a critical vulnerability?
While CVE-2026-30573 is not rated as critical, it poses a risk to business logic that can be exploited for unauthorized transaction manipulation.