Description
A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 7.3/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Open Source Clinic Management System | 1.0 |
References
- https://github.com/mysq13/CVE/issues/3Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.311238Permissions Required, VDB Entry
- https://vuldb.com/?id.311238Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.590566Third Party Advisory, VDB Entry
- https://www.sourcecodester.com/Product
- https://github.com/mysq13/CVE/issues/3Exploit, Issue Tracking, Third Party Advisory
Timeline
- Published
- Jun 6, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed