CVE-2023-4186: SourceCodester Pharmacy Management System manage_website.php unrestricted upload

Published Aug 6, 2023

Updated

A vulnerability was found in SourceCodester Pharmacy Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file managewebsite.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-236221 was assigned to this vulnerability.

Affected Software

1 affected component

Pharmacy Management System Project Pharmacy Management System=1.0

Event History

Aug 6, 2023

CVE Published

via MITRE·01:31 PM

Data Sourced

via MITRE·01:31 PM

DescriptionSeverityWeakness

Data Sourced

02:15 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2023-4186?

The severity of CVE-2023-4186 is critical with a severity value of 9.8.

How does CVE-2023-4186 affect SourceCodester Pharmacy Management System 1.0?

CVE-2023-4186 affects an unknown functionality of the file manage_website.php, allowing for unrestricted upload.

Is CVE-2023-4186 exploitable remotely?

Yes, CVE-2023-4186 can be launched remotely.

Is there a fix available for CVE-2023-4186?

Currently, there is no available fix for CVE-2023-4186. It is recommended to apply security patches or updates provided by the vendor when they become available.

What is the Common Weakness Enumeration (CWE) ID for CVE-2023-4186?

The Common Weakness Enumeration (CWE) ID for CVE-2023-4186 is 434.