CVE-2025-3209 code-projects Patient Record Management System add_patient.php sql injection

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /addpatient.php. The manipulation of the argument itrno leads to sql injection. The attack can be launched...

CVE-2025-3209 code-projects Patient Record Management System add_patient.php sql injection

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /addpatient.php. The manipulation of the argument itrno leads to sql injection. The attack can be launched...

CVE-2025-3209: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /addpatient.php. The manipulation of the argument itrno leads to sql injection. The attack can be launched...

Design/Logic Flaw

An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via addpatient.php...

CVE-2021-45852: Always-Incorrect Control Flow Implementation

An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via addpatient.php...

CVE-2021-43630: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in addpatient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web...