Sourcecodester · Sourcecodester Online Medicine Ordering System · CVE-2025-3140
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Online Medicine Ordering System version 1.0
**Description**
A critical issue was found in the system, affecting an unknown part of the file /view category.php. The manipulation of the `ID` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
**Recommendations**
For SourceCodester Online Medicine Ordering System version 1.0, consider disabling access to the /view category.php file until a patch is available. As a temporary workaround, restrict the manipulation of the `ID` argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.