CVE-2025-9775

CriticalCVSS 9.8/10Last modified Oct 19, 2026

Description

A vulnerability was found in RemoteClinic up to 2.0. Impacted is an unknown function of the file /staff/edit-my-profile.php. The manipulation of the argument image results in unrestricted upload. The attack may be launched remotely. The exploit has been made public and could be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284 CWE-434

Affected software

Vendor	Product	Versions
n/a	RemoteClinic	2.0

References

https://github.com/diy777/cve/issues/2Exploit, Third Party Advisory
https://vuldb.com/?ctiid.322075Permissions Required, VDB Entry
https://vuldb.com/?id.322075Third Party Advisory, VDB Entry
https://vuldb.com/?submit.640955Third Party Advisory, VDB Entry
https://github.com/diy777/cve/issues/2Exploit, Third Party Advisory

Timeline

Published: Sep 1, 2025
Last modified: Oct 19, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-97766.5The CatFolders – Tame Your WordPress Media Library by Category plugin for WordPress is vulnerable to time-based SQL Injection via the CSV Im CVE-2025-97787.0A security vulnerability has been detected in Tenda W12 up to 3.0.0.6(3948). Affected is an unknown function of the file /etc_ro/shadow of t CVE-2025-97798.8A vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this vulnerability is the function sub_4162DC of the file /CVE-2025-97808.8A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this issue is the function sub_419BE0 of the file /boafrm/formIpQo CVE-2025-97818.8A vulnerability has been found in TOTOLINK A702R 4.0.0-B20211108.1423. This affects the function sub_4162DC of the file /boafrm/formFilter. CVE-2025-97828.8A vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423. This vulnerability affects the function sub_4466F8 of the file /boafrm/for CVE-2025-97838.8A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423. This issue affects the function sub_418030 of the file /boafrm/formPa CVE-2025-97847.5A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This i CVE-2025-97857.7PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and management. When CVE-2025-97869.8A vulnerability was found in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /teacher_signup.ph CVE-2025-97876.1Zohocorp ManageEngine Applications Manager versions 177400 and below are vulnerable to Stored Cross-Site Scripting vulnerability in the NOC CVE-2025-97889.8A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown fu