CVE-2025-3243

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dental_form.php. The manipulation of the argument itr_no/dental_no leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
code-projects	Patient Record Management System	1.0

References

https://code-projects.org/Product
https://github.com/BinBall/cve/blob/master/README.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.303269Permissions Required, VDB Entry
https://vuldb.com/?id.303269Third Party Advisory, VDB Entry
https://vuldb.com/?submit.547882Third Party Advisory, VDB Entry

Timeline

Published: Apr 4, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-324306.1XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-3 through CVE-2025-324319.1Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. In versions prior to 2.11.24, 3.3.6, and 3.4.0-rc2. There is a pote CVE-2025-3243210.0Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to bef CVE-2025-3243310.0Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH CVE-2025-324349.8PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based aut CVE-2025-324352.6Hydra is a Continuous Integration service for Nix based projects. Evaluation of untrusted non-flake nix code could potentially access secret CVE-2025-324367.1AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, CVE-2025-324378.7AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, CVE-2025-324388.8make-initrd-ng is a tool for copying binaries and their dependencies. Local privilege escalation affecting all NixOS users. With systemd.shu CVE-2025-324396.5pleezer is a headless Deezer Connect player. Hook scripts in pleezer can be triggered by various events like track changes and playback stat CVE-2025-32448.8A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as critical. Affected by CVE-2025-324409.8NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanis