CVE-2025-6452

CVE-2025-6452 affects CodeAstro Patient Record Management System 1.0. The vulnerability exists in the Generate New Report Page, where manipulating the argument Patient Name/Name leads to cross-site scripting. It can be exploited remotely and the exploit has been disclosed publicly. Remediation/wo...

CVE-2025-7147

CVE-2025-7147 affects CodeAstro Patient Record Management System 1.0. The vulnerability exists in the login functionality (file /login.php) where manipulating the uname parameter triggers SQL injection. It can be exploited remotely and, per sources, the exploit has been disclosed publicly. Multip...

CVE-2025-6664

CVE-2025-6664 affects CodeAstro Patient Record Management System 1.0. The vulnerability is a cross-site request forgery in an unknown function, allowing remote attack with a publicly disclosed exploit. Root cause details and affected component/version beyond 1.0 are not specified in the provided ...