CVE-2025-3729

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Apr 16, 2025
Updated: Apr 29, 2025
CWE ID 78
CWE ID 77

Summary

CVE-2025-3729 is a critical vulnerability identified in the Database Backup Handler component of SourceCodester's Web-based Pharmacy Product Management System 1.0. This issue arises from the improper handling of the argument "txtdbname" in the file backup.php, leading to os command injection. An attacker can exploit this vulnerability remotely, potentially gaining unauthorized system access and executing malicious commands. The existence and exploit methods of this vulnerability have been made public, increasing the risk to affected systems.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share