Vulnerability · Published Mar 2, 2026 · Assigned by VulDB
CVE-2026-3401SourceCodester Web-based Pharmacy Product Management System session expiration
Low 3.1
In plain English
A low-severity security flaw in Web-based Pharmacy Product Management System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Official description
A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote exploitation of the attack is possible. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Web-based Pharmacy Product Management System | 1.0 |
Weakness: CWE-613 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
References
- VDB-348296 | SourceCodester Web-based Pharmacy Product Management System session expiration vdb-entry
- VDB-348296 | CTI Indicators (IOB, IOC) signature, permissions-required
- Submit #762795 | SourceCodester Web-based-Pharmacy-Product-Management-System 1.0 Improper Access Controls third-party-advisory
- https://github.com/hiranerakkot/Web-based-Pharmacy-Product-Management-System/blob/main/README.md exploit
- https://www.sourcecodester.com/ product