CVE-2026-78245

Name of the Vulnerable Software and Affected Versions itsourcecode Online Pharmacy System version 1.0

Description An unrestricted file upload flaw exists in the User Registration component. A remote attacker can manipulate the photo argument within the move uploaded file() function in the 'all users/register.php' file. This could allow the deployment of a webshell to compromise systems handling prescriptions and patient-linked records.

Recommendations Update itsourcecode Online Pharmacy System version 1.0 to a version that fixes this issue. As a temporary mitigation, restrict access to the 'all users/register.php' file or disable the photo upload functionality.