CVE-2025-8497

5.5 mediumEPSS 0.5%

Medium (5.5) in anisha online medicine guide. EPSS 0.5% chance of exploitation in the next 30 days.

A weakness has been identified in code-projects Online Medicine Guide 1.0. This affects an unknown part of the file /cusfindphar2.php. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2025-08-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

anisha:online_medicine_guide

References

https://code-projects.org/
https://github.com/shokaku-cyb/cve/issues/2
https://vuldb.com/?ctiid.318596
https://vuldb.com/?id.318596
https://vuldb.com/?submit.626776

Check your stack JSON