CVE-2025-11038: itsourcecode Online Clinic Management System details.php sql injection

Published Sep 26, 2025

Updated

A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

itsourcecode Online Clinic Management System

Angeljudesuarez Online Clinic Management System=1.0

Event History

Sep 26, 2025

CVE Published

via MITRE·07:32 PM

Data Sourced

via MITRE·07:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11038?

CVE-2025-11038 is classified as a critical vulnerability due to the potential for SQL injection attacks.

How do I fix CVE-2025-11038?

To fix CVE-2025-11038, ensure that input validation and parameterized queries are implemented for the affected function in the /details.php file.

What systems are affected by CVE-2025-11038?

CVE-2025-11038 affects the itsourcecode Online Clinic Management System 1.0.

Can CVE-2025-11038 be exploited remotely?

Yes, CVE-2025-11038 can be exploited remotely through manipulation of the argument ID.

What type of vulnerability is CVE-2025-11038?

CVE-2025-11038 is identified as an SQL injection vulnerability.