Vulnerability Details CVE-2025-45997
Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguised as an image by modifying the Content-Type header to image/jpg.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.8%
CVSS Severity
CVSS v3 Score 8.6
References
Products affected by CVE-2025-45997
-
cpe:2.3:a:senior-walter:web-based_pharmacy_product_management_system:1.0