CVE-2025-10618: itsourcecode Online Clinic Management System transact.php sql injection

Published Sep 17, 2025

Updated

A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file transact.php. Such manipulation of the argument firstname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Other parameters might be affected as well.

Affected Software

2 affected components

itsourcecode Online Clinic Management System

Angeljudesuarez Online Clinic Management System=1.0

Event History

Sep 17, 2025

CVE Published

via MITRE·09:02 PM

Data Sourced

via MITRE·09:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 6, 58705

Event

via NVD·06:51 PM

Frequently Asked Questions

What is the severity of CVE-2025-10618?

CVE-2025-10618 is considered a high-severity vulnerability due to its potential for SQL injection.

How do I fix CVE-2025-10618?

To fix CVE-2025-10618, ensure proper parameter validation and use prepared statements to prevent SQL injection in transact.php.

What is the impact of CVE-2025-10618?

The impact of CVE-2025-10618 includes unauthorized data access and potential complete compromise of the database.

What software is affected by CVE-2025-10618?

CVE-2025-10618 affects the itsourcecode Online Clinic Management System version 1.0.

Can CVE-2025-10618 be exploited remotely?

Yes, CVE-2025-10618 can be exploited remotely due to weak input validation.