CVE-2025-3697: SourceCodester Web-based Pharmacy Product Management System edit-product.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-product.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3697?
CVE-2025-3697 is classified as critical due to its potential for SQL injection attacks.
How do I fix CVE-2025-3697?
To fix CVE-2025-3697, sanitize input data and use prepared statements to prevent SQL injection in the /edit-product.php file.
What is the impact of CVE-2025-3697?
The impact of CVE-2025-3697 includes unauthorized access to the database, allowing attackers to manipulate sensitive data.
Which systems are affected by CVE-2025-3697?
CVE-2025-3697 affects the SourceCodester Web-based Pharmacy Product Management System 1.0.
Are there any known exploits for CVE-2025-3697?
Yes, there are known exploits for CVE-2025-3697 that leverage SQL injection vulnerabilities to compromise system security.