CVE-2025-3764: SourceCodester Web-based Pharmacy Product Management System edit-product.php unrestricted upload
A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /edit-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3764?
CVE-2025-3764 is classified as a critical vulnerability.
What component of the system is affected by CVE-2025-3764?
CVE-2025-3764 affects the /edit-product.php file in the SourceCodester Web-based Pharmacy Product Management System.
What type of vulnerability is CVE-2025-3764?
CVE-2025-3764 is characterized by unrestricted file upload due to vulnerable argument manipulation.
How can I mitigate CVE-2025-3764?
Mitigation for CVE-2025-3764 typically involves securing file upload functionality and validating uploaded files.
How can CVE-2025-3764 impact my application?
CVE-2025-3764 can allow unauthorized users to upload malicious files, potentially leading to remote code execution.