CVE-2025-5857

Name of the Vulnerable Software and Affected Versions code-projects Patient Record Management System version 1.0

Description A critical issue affects the processing of the file /urinalysis record.php, where the manipulation of the itr no argument leads to SQL injection. This issue may be exploited remotely.

Recommendations For code-projects Patient Record Management System version 1.0, avoid using the itr no argument in the /urinalysis record.php file until a patch is available. As a temporary workaround, consider restricting access to the /urinalysis record.php file to minimize the risk of exploitation.