CVE-2026-5812 MEDIUM

CVE-2026-5812: SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error

Vendor Sourcecodester
Product Pharmacy Product Management System
Weakness CWE-840
Published April 8, 2026
Last update April 9, 2026

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

Description

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.

Key dates

Disclosure timeline

April 8, 2026 CVE published
April 9, 2026 Record updated