CVE-2025-3783: SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload
A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3783?
CVE-2025-3783 is classified as a critical vulnerability.
How do I fix CVE-2025-3783?
To mitigate CVE-2025-3783, ensure that the file '/add-product.php' has proper validation and restrictions on file uploads.
What systems are affected by CVE-2025-3783?
CVE-2025-3783 affects the SourceCodester Web-based Pharmacy Product Management System version 1.0.
What kind of vulnerability is CVE-2025-3783?
CVE-2025-3783 is an unrestricted file upload vulnerability.
What are the potential risks of CVE-2025-3783?
Exploitation of CVE-2025-3783 could allow attackers to upload malicious files, leading to further compromises of the system.