CVE-2025-3764

CWE-284 — Improper Access ControlCWE-434 — Unrestricted File UploadCWE-401 — Memory Leak4 documents4 sources
Severity
5.3MEDIUM
EPSS
0.3%
top 46.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Web-based Pharmacy Product Management SystemSenior-walter Web-based Pharmacy Product Management System
Timeline
PublishedApr 17

Description

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /edit-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
SourceCodester Web-based Pharmacy Product Management System edit-product.php unrestricted upload↗2025-04-17
▶
GHSA
GHSA-h9c2-qf4j-fhfg: A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1↗2025-04-17
▶

📋Vendor Advisories

1
Microsoft
A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerability is similar to the older CVE-2019-18808. The hi↗2022-08-09
▶
CVE-2025-3764 (MEDIUM CVSS 5.3) | A vulnerability classified as criti | cvebase.io