> CVE-2026-30574

« BACK_TO_HOME
PUBLISHED
2026-03-27 17:16
MODIFIED
2026-03-27 17:16
EPSS (Prob. Exploit)
0.40%
Top 67.2%
DATA SOURCES:
NVD 🔗 2026-03-27 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file. The application fails to verify if the requested sales quantity (txtqty) exceeds the available stock level. An attacker can manipulate the request to purchase a quantity that is significantly higher than the actual available stock.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
27/03/2026 17:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 7 months ago

> REFERENCES

https://github.com/meifukun/Web-Security-PoCs/blob/main/Pharmacy-Product-Managem...
« BACK_TO_HOME