CVE-2025-45997

Publication date

2025-05-28 00:00:00

Family

mitre

State

PUBLISHED

Description

Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguised as an image by modifying the Content-Type header to image/jpg.