SQL Injection Vulnerability in SourceCodester Web-based Pharmacy Management System
CVE-2025-3694

7.3HIGH

Key Information:

Vendor
SourceCodester
Status
Web-based Pharmacy Product Management System
Vendor
CVE Published:
16 April 2025

Summary

A vulnerability has been identified in the SourceCodester Web-based Pharmacy Product Management System version 1.0, specifically within the Login Handler component. This vulnerability occurs due to improper handling of the login_email parameter, allowing for SQL injection attacks. An attacker can exploit this weakness remotely, potentially compromising the integrity of the system. Public disclosure of the exploit increases the urgency for affected users to implement security measures and updates to safeguard against potential threats.

References

https://github.com/yaklang/IRifyScanResult/blob/main/Web-...
https://vuldb.com/?ctiid.304983
https://vuldb.com/?id.304983

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.