CVE-2025-3210: code-projects Patient Record Management System birthing_pending.php sql injection
A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /birthingpending.php. The manipulation of the argument birthid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3210?
CVE-2025-3210 is rated as critical due to its potential for SQL injection vulnerabilities in the Patient Record Management System.
How do I fix CVE-2025-3210?
To mitigate CVE-2025-3210, it is recommended to implement input validation and parameterized queries to avoid SQL injection attacks.
What type of attack is associated with CVE-2025-3210?
CVE-2025-3210 is associated with SQL injection attacks that can manipulate the birth_id argument in the file /birthing_pending.php.
Which software is affected by CVE-2025-3210?
CVE-2025-3210 affects version 1.0 of the Patient Record Management System by code-projects.
What functionality is vulnerable in CVE-2025-3210?
CVE-2025-3210 affects an unknown functionality related to the file /birthing_pending.php, specifically regarding input manipulation.