CVE-2025-3729: SourceCodester Web-based Pharmacy Product Management System Database Backup backup.php os command injection
First published: Wed Apr 16 2025(Updated: )
A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file backup.php of the component Database Backup Handler. The manipulation of the argument txtdbname leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Web-based Pharmacy Product Management System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-3729?
CVE-2025-3729 is classified as a critical vulnerability affecting the SourceCodester Web-based Pharmacy Product Management System.
How does CVE-2025-3729 impact database security?
CVE-2025-3729 allows for the manipulation of the database backup process, potentially exposing sensitive data.
What component of the SourceCodester system is affected by CVE-2025-3729?
CVE-2025-3729 affects the database backup handler, specifically through the backup.php file.
How do I fix CVE-2025-3729?
To fix CVE-2025-3729, update the SourceCodester Web-based Pharmacy Product Management System to the latest version that addresses this vulnerability.
Are there any known exploits for CVE-2025-3729?
Yes, there are known exploits targeting the critical vulnerability CVE-2025-3729, making prompt remediation essential.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/title
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/severity
- agent/last-modified-date
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/sourcecodester
- canonical/sourcecodester web-based pharmacy product management system