{"id":"CVE-2026-3401","state":"PUBLISHED","title":"SourceCodester Web-based Pharmacy Product Management System session expiration","description":"A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote exploitation of the attack is possible. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks.","publishedAt":"2026-03-02T00:02:10.449Z","updatedAt":"2026-03-02T15:40:51.662Z","severity":{"score":2.3,"label":"Low","version":"4.0","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester Web-based Pharmacy Product Management System"],"affected":[{"vendor":"SourceCodester","product":"Web-based Pharmacy Product Management System","versions":[{"version":"1.0","status":"affected"}]}],"references":["https://vuldb.com/?id.348296","https://vuldb.com/?ctiid.348296","https://vuldb.com/?submit.762795","https://github.com/hiranerakkot/Web-based-Pharmacy-Product-Management-System/blob/main/README.md","https://www.sourcecodester.com/"],"weaknesses":["CWE-613"],"ingestedAt":"2026-10-29T20:11:50.837Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/3xxx/CVE-2026-3401.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-3401","state":"PUBLISHED","datePublished":"2026-03-02T00:02:10.449Z","dateUpdated":"2026-03-02T15:40:51.662Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-03-01T06:43:59.046Z"},"containers":{"cna":{"title":"SourceCodester Web-based Pharmacy Product Management System session expiration","descriptions":[{"lang":"en","value":"A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote exploitation of the attack is possible. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks."}],"affected":[{"vendor":"SourceCodester","product":"Web-based Pharmacy Product Management System","versions":[{"version":"1.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.348296","name":"VDB-348296 | SourceCodester Web-based Pharmacy Product Management System session expiration","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.348296","name":"VDB-348296 | CTI Indicators (IOB, IOC)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.762795","name":"Submit #762795 | SourceCodester Web-based-Pharmacy-Product-Management-System 1.0 Improper Access Controls","tags":["third-party-advisory"]},{"url":"https://github.com/hiranerakkot/Web-based-Pharmacy-Product-Management-System/blob/main/README.md","tags":["exploit"]},{"url":"https://www.sourcecodester.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":2.3,"vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"LOW"}},{"cvssV3_1":{"version":"3.1","baseScore":3.1,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R","baseSeverity":"LOW"}},{"cvssV3_0":{"version":"3.0","baseScore":3.1,"vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R","baseSeverity":"LOW"}},{"cvssV2_0":{"version":"2.0","baseScore":2.1,"vectorString":"AV:N/AC:H/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-613","type":"CWE","lang":"en","description":"Session Expiration"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-03-02T00:02:10.449Z"},"timeline":[{"time":"2026-03-01T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-03-01T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-03-01T07:49:19.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Hiran (VulDB User)","type":"reporter"}],"tags":["x_freeware"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-02T15:40:40.961767Z","id":"CVE-2026-3401","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-02T15:40:51.662Z"}}]}}}