Critical · 9.8 CVE-2025-46193 EUVD-2025-14167GHSA-pj3j-8874-c986

SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in user_proposal_upda…

Published May 9, 2025 · Updated May 12, 2025 · Assigned by mitre

Description

SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in user_proposal_update_order.php.

References

https://portswigger.net/web-security/file-upload
https://github.com/x6vrn/mitre/blob/main/CVE-2025-46193.md