CVE-2025-5376: SourceCodester Health Center Patient Record Management System patient.php sql injection
A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /patient.php. The manipulation of the argument itrno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5376?
CVE-2025-5376 is classified as a critical vulnerability.
How do I fix CVE-2025-5376?
To fix CVE-2025-5376, it is essential to sanitize inputs to the /patient.php file to prevent SQL injection.
What kind of vulnerability is CVE-2025-5376?
CVE-2025-5376 is a SQL injection vulnerability found in the SourceCodester Health Center Patient Record Management System.
Which version of the software is affected by CVE-2025-5376?
CVE-2025-5376 affects version 1.0 of the SourceCodester Health Center Patient Record Management System.
What is the impact of exploiting CVE-2025-5376?
Exploiting CVE-2025-5376 could allow an attacker to manipulate the database through SQL injection.