CVE-2025-3729: fallo de gravedad media en SourceCodester Web-based Pharmacy Product…
SourceCodester Web-based Pharmacy Product Management System Database Backup backup.php os command injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9epss 3.3%
A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file backup.php of the component Database Backup Handler. The manipulation of the argument txtdbname leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
SourceCodester · Web-based Pharmacy Product Management SystemCVEs relacionadas — SourceCodester Web-based Pharmacy Product…
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-3783MEDIUMSourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted uploadEPSS 1.0%CVE-2025-3383MEDIUMSourceCodester Web-based Pharmacy Product Management System search_sales.php sql injectionEPSS 0.7%CVE-2025-3694MEDIUMSourceCodester Web-based Pharmacy Product Management System Login sql injectionEPSS 0.6%CVE-2025-3244MEDIUMSourceCodester Web-based Pharmacy Product Management System Create User Page add-admin.php unrestricted uploadEPSS 0.6%CVE-2025-3765MEDIUMSourceCodester Web-based Pharmacy Product Management System edit-photo.php unrestricted uploadEPSS 0.6%CVE-2025-3764MEDIUMSourceCodester Web-based Pharmacy Product Management System edit-product.php unrestricted uploadEPSS 0.6%