CVE-2026-3401: low-severity vulnerability in SourceCodester Web-based Pharmacy Product…
SourceCodester Web-based Pharmacy Product Management System session expiration
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 2.3epss 0.4%
A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote exploitation of the attack is possible. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
SourceCodester · Web-based Pharmacy Product Management SystemRelated CVEs — SourceCodester Web-based Pharmacy Product…
In the same product, most dangerous first.
CVE-2025-3729MEDIUMSourceCodester Web-based Pharmacy Product Management System Database Backup backup.php os command injectionEPSS 3.3%CVE-2025-3783MEDIUMSourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted uploadEPSS 1.0%CVE-2025-3383MEDIUMSourceCodester Web-based Pharmacy Product Management System search_sales.php sql injectionEPSS 0.7%CVE-2025-3694MEDIUMSourceCodester Web-based Pharmacy Product Management System Login sql injectionEPSS 0.6%CVE-2025-3244MEDIUMSourceCodester Web-based Pharmacy Product Management System Create User Page add-admin.php unrestricted uploadEPSS 0.6%CVE-2025-3765MEDIUMSourceCodester Web-based Pharmacy Product Management System edit-photo.php unrestricted uploadEPSS 0.6%