CVE-2025-4459: code-projects Patient Record Management System fecalysis_form.php sql injection
A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file fecalysisform.php. The manipulation of the argument itrno leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4459?
CVE-2025-4459 has been rated as critical due to its potential for SQL injection vulnerabilities.
How does CVE-2025-4459 affect the Patient Record Management System?
CVE-2025-4459 affects the functionality of fecalysis_form.php in the Patient Record Management System.
What is the cause of CVE-2025-4459?
CVE-2025-4459 is caused by improper handling of the 'itr_no' argument, leading to SQL injection.
How can I fix CVE-2025-4459?
To fix CVE-2025-4459, ensure that all user inputs are properly sanitized and parameterized queries are used.
What could be the impact of exploiting CVE-2025-4459?
Exploiting CVE-2025-4459 may allow an attacker to manipulate the database, leading to unauthorized data access or modification.