CVE-2025-3096

🗓️ 01 Apr 2025 18:24:30Reported by rapid7Type

SQL injection vulnerability in Clinic Patient Management System version 2.0 login page.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-3096	1 Apr 202519:40	–	circl
CNNVD	Clinic’s Patient Management System SQL注入漏洞	1 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-3096 Clinics Patient Management System SQL Injection	1 Apr 202518:24	–	cvelist
Metasploit	Clinic's Patient Management System 1.0 - Unauthenticated RCE	21 May 202518:53	–	metasploit
NVD	CVE-2025-3096	1 Apr 202519:15	–	nvd
Packet Storm	📄 Clinic's Patient Management System 1.0 SQL Injection / Remote Code Execution	22 May 202500:00	–	packetstorm
Packet Storm	📄 Clinic's Patient Management System 2.0 Remote Code Execution	10 Dec 202500:00	–	packetstorm
Positive Technologies	PT-2025-14380 · Unknown · Clinic'S Patient Management System	1 Apr 202500:00	–	ptsecurity
Rapid7 Blog	Metasploit Wrap-Up	22 May 202518:14	–	rapid7blog
RedhatCVE	CVE-2025-3096	3 Apr 202518:30	–	redhatcve

[
  {
    "defaultStatus": "unaffected",
    "product": "Clinic's Patient Management System",
    "programFiles": [
      "index.php"
    ],
    "repo": "https://www.sourcecodester.com/php-clinics-patient-management-system-source-code",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      }
    ]
  }
]

Source	Link
cve	www.cve.org/CVERecord
sourcecodester	www.sourcecodester.com/php-clinics-patient-management-system-source-code

15 Apr 2026 00:35Current

8.1High risk

Vulners AI Score8.1

CVSS 49.3

EPSS0.47623

SSVC

CWE-89