CVE-2025-3783

Medium CVSS: 5.3

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Vendor

Seniorwalter

Product

Web-based Pharmacy Product Management System

CWE

CWE-284

Yayın Tarihi

2025-04-18 06:15:46

Güncelleme

2025-04-23 18:03:35

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-284 Web-based Pharmacy Product Management System MEDIUM Seniorwalter 2025

Referanslar

https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/upload_in_add-product.md https://vuldb.com/?ctiid.305605 https://vuldb.com/?id.305605 https://vuldb.com/?submit.553723 https://www.sourcecodester.com/ https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/upload_in_add-product.md