CVE-2023-4186
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
A critical vulnerability was found in SourceCodester Pharmacy Management System version 1.0. It affects an unknown functionality of the file manage_website.php, leading to unrestricted file uploads.
Risk Assessment
This vulnerability allows for remote exploitation, posing a significant threat to the security of the system and the organization's data.
Recommendation
It is recommended to immediately update the system to the latest version and implement appropriate security measures to mitigate the risk of exploitation.
Original NVD description (English source)
A vulnerability was found in SourceCodester Pharmacy Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_website.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-236221 was assigned to this vulnerability.