Description
SourceCodester Web-based Pharmacy Product Management System是SourceCodester开源的一个基于 Web 的药房产品管理系统。 SourceCodester Web-based Pharmacy Product Management System 1.0版本存在命令注入漏洞，该漏洞源于对文件backup.php中参数txtdbname的错误操作导致操作系统命令注入。
SourceCodester Web-based Pharmacy Product Management System 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-3729
https://cert.kenet.or.ke/cve-2025-3729-sourcecodester-web-based-pharmacy-product-management-system-os-command-injection
https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/rce_in_backup.md
https://vuldb.com/?id.305075
https://www.knowsafe.com/ti/info/0/995554
https://www.sourcecodester.com/php/17883/web-based-product-alert-system.html