CVE-2026-30575
HIGH
MEDIUM
Priority: 0.03
BB Relevance:
75/100
Published: 2026-03-27
Modified: 2026-11-11
First seen: 2026-11-11
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtqty" parameter during stock entry, allowing negative values to be processed. This causes the system to decrease the inventory level instead of increasing it, leading to inventory corruption and potential Denial of Service by depleting stock records.
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| senior-walter | web-based_pharmacy_product_management_system | 1.0 |
References & Advisories (1)
Exploit
Vendor Advisory