File Upload Vulnerability in Sourcecodester Web-based Pharmacy Product Management System

CVE-2025-45997

What is CVE-2025-45997?

The Sourcecodester Web-based Pharmacy Product Management System version 0.0.1 is susceptible to a file upload vulnerability. An attacker can exploit this weakness by uploading a PHP file with malicious intent, disguised as a standard image file. This is achieved by modifying the Content-Type header to 'image/jpg', enabling unauthorized access and potential execution of harmful scripts on the server.

References