Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3wqr-83x4-348r

Опубликовано: 27 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file. The application fails to verify if the requested sales quantity (txtqty) exceeds the available stock level. An attacker can manipulate the request to purchase a quantity that is significantly higher than the actual available stock.

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file. The application fails to verify if the requested sales quantity (txtqty) exceeds the available stock level. An attacker can manipulate the request to purchase a quantity that is significantly higher than the actual available stock.

EPSS

Процентиль: 11%
0.00036
Низкий

7.5 High

CVSS3

Дефекты

CWE-841

Связанные уязвимости

CVSS3: 7.5
nvd
18 дней назад

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file. The application fails to verify if the requested sales quantity (txtqty) exceeds the available stock level. An attacker can manipulate the request to purchase a quantity that is significantly higher than the actual available stock.

EPSS

Процентиль: 11%
0.00036
Низкий

7.5 High

CVSS3

Дефекты

CWE-841