CVE-2025-5780: code-projects Patient Record Management System view_dental.php sql injection
A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /viewdental.php. The manipulation of the argument itrno leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5780?
CVE-2025-5780 is classified as a critical vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-5780?
To fix CVE-2025-5780, sanitize and validate the input for the 'itr_no' parameter in the /view_dental.php file.
What software is affected by CVE-2025-5780?
CVE-2025-5780 affects the Patient Record Management System version 1.0 developed by code-projects.
What type of attack does CVE-2025-5780 enable?
CVE-2025-5780 enables SQL injection attacks through improper handling of the 'itr_no' argument.
What is the impact of exploiting CVE-2025-5780?
Exploiting CVE-2025-5780 could lead to unauthorized access to sensitive data within the Patient Record Management System.