CVE-2025-10618
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file transact.php. Such manipulation of the argument firstname leads to SQL injection. The attack may be launched remotely and the exploit has been disclosed publicly.
Risk Assessment
An attacker can execute arbitrary SQL queries, potentially leading to data leakage, modification, or deletion from the database. The vulnerability is easy to exploit as the exploit is publicly available.
Recommendation
Immediately apply patches or isolate the system from the public network. It is recommended to implement parameterized SQL queries and input validation.
Other vulnerabilities in itsourcecode Online Clinic Management System
Original NVD description (English source)
A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file transact.php. Such manipulation of the argument firstname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Other parameters might be affected as well.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS