Description
Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguised as an image by modifying the Content-Type header to image/jpg.
Metrics
CVSS 3.1 8.6/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:LWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- https://github.com/litsasuk/CVE-POC/blob/main/CVE-2025-45997.mdExploit, Third Party Advisory
- https://www.sourcecodester.com/php/17883/web-based-product-alert-system.htmlProduct
Timeline
- Published
- May 28, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed