CVE-2025-3696
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Apr 16, 2025
Updated: May 14, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-3696 is a critical vulnerability affecting the SourceCodester Web-based Pharmacy Product Management System 1.0. The issue lies in the manipulation of the Name argument in the file /search/search_stock.php, leading to SQL injection. This vulnerability can be exploited remotely, allowing unauthorized access to sensitive data or even system takeover. The exploit for this vulnerability has been made public, making it a significant threat to systems still using the outdated software.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.