PT-2025-49129 · Unknown · Dawa-Pharma

Nu11Secur1Ty · Published 2025-12-04 · Updated 2025-12-04 · CVE-2023-53734

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions dawa-pharma version 1.0

Description The application allows unauthenticated attackers to execute SQL queries on the server. Successful exploitation could lead to access of sensitive information and potential administrative access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-53734

Affected Products

Dawa-Pharma

References · 7

• 🔥 https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/mayuri_k/2022/dawa-pharma-1.0-2022 · Exploit
• 🔥 https://exploit-db.com/exploits/51818 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53734 · Security Note
• https://mayurik.com/source-code/P0349/best-pharmacy-billing-software-free-download · Note
• https://nu11secur1ty.com · Note
• https://twitter.com/CVEnew/status/1996685101212545246 · Twitter Post
• https://vulncheck.com/advisories/dawa-pharma-10-sql-injection-via-email-parameter · Note