CVE-2025-45997: Malicious File Upload
Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguised as an image by modifying the Content-Type header to image/jpg.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-45997?
CVE-2025-45997 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2025-45997?
To fix CVE-2025-45997, ensure that file uploads are restricted to specific file types and implement server-side validation for uploaded files.
What are the potential impacts of exploiting CVE-2025-45997?
Exploiting CVE-2025-45997 allows attackers to upload and execute malicious PHP files, potentially leading to unauthorized access and control of the server.
Which versions of Sourcecodester Web-based Pharmacy Product Management System are affected by CVE-2025-45997?
CVE-2025-45997 affects version 0.0.1 of Sourcecodester Web-based Pharmacy Product Management System.
Can CVE-2025-45997 be exploited remotely?
Yes, CVE-2025-45997 can be exploited remotely by altering the Content-Type header to bypass file upload restrictions.