Description
SourceCodester Web-based Pharmacy Product Management System是SourceCodester开源的一个基于 Web 的药房产品管理系统。 SourceCodester Web-based Pharmacy Product Management System 1.0版本存在注入漏洞，该漏洞源于对参数Name的错误操作会导致SQL注入。
SourceCodester Web-based Pharmacy Product Management System 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.knowsafe.com/ti/info/0/995650
https://cvefeed.io/vuln/detail/CVE-2025-3697
https://vuldb.com/?id.304985
https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/sql_inject_in_edit.md
https://www.cvedetails.com/cve/CVE-2025-3383/
https://cert.kenet.or.ke/index.php/cve-2025-3694-sourcecodester-web-based-pharmacy-product-management-system-sql-injection
https://nvd.nist.gov/vuln/detail/CVE-2025-3697
https://www.sourcecodester.com/php/17883/web-based-product-alert-system.html