CVE-2025-3348: code-projects Patient Record Management System edit_dpatient.php sql injection
A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. This vulnerability affects unknown code of the file /editdpatient.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3348?
CVE-2025-3348 is classified as a critical vulnerability due to its impact on SQL injection risk.
How does CVE-2025-3348 affect the Patient Record Management System?
CVE-2025-3348 affects the code related to the /edit_dpatient.php file, allowing remote attackers to manipulate the ID argument.
What type of vulnerability is CVE-2025-3348?
CVE-2025-3348 is an SQL injection vulnerability which can be exploited to gain unauthorized access to sensitive data.
How can I mitigate CVE-2025-3348?
To mitigate CVE-2025-3348, validate and sanitize user inputs and apply strict access controls.
Can CVE-2025-3348 be exploited remotely?
Yes, CVE-2025-3348 can be exploited remotely, making it crucial to address the vulnerability promptly.