CVE-2025-3764

creationtimestamp| type| source ---|---|--- 2025-04-17 19:57:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12327 2025-04-17 22:53:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274omk3i2h 2025-04-18 00:41:45+00:00| seen|...

CVE-2025-3764 SourceCodester Web-based Pharmacy Product Management System edit-product.php unrestricted upload

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /edit-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be initiated remotely. T...

CVE-2025-3764

CVE-2025-3764 affects SourceCodester Web-based Pharmacy Product Management System 1.0. The vulnerability lies in the /edit-product.php file, where manipulating the Avatar parameter enables unrestricted file upload. This can be exploited remotely, and publicly disclosed exploit information exists....