SourceCodester Web-Based Pharmacy Product Management System Database Backup Handler OS Command Injection Vulnerability

A critical OS command injection vulnerability has been identified in SourceCodester Web-based Pharmacy Product Management System version 1.0. The issue arises in the Database Backup Handler component, specifically within the backup.php file, where the txtdbname argument is improperly processed. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for OS command injection, where an attacker can execute arbitrary commands on the server hosting the application.