CVE-2026-30574: senior-walter web-based_pharmacy_product_management_system

Vulnerability summary

CVE-2026-30574 is a high (CVSS 7.5) vulnerability in senior-walter web-based_pharmacy_product_management_system. EPSS estimates a 0.38% chance of exploitation in the next 30 days, higher than 30.9% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 27-03-2026
   PublishedVulnerability first disclosed.
2. 27-03-2026
   Last modifiedVulnerability information updated.

Description

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file. The application fails to verify if the requested sales quantity (txtqty) exceeds the available stock level. An attacker can manipulate the request to purchase a quantity that is significantly higher than the actual available stock.

• CWE-841Improper Enforcement of Behavioral WorkflowThe product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence.