PT-2025-31623 · Code Projects · Online Medicine Guide
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
code-projects Online Medicine Guide version 1.0
Description
A critical issue exists in code-projects Online Medicine Guide 1.0 related to an unknown functionality within the
/login.php file. The manipulation of the uname argument can lead to SQL injection. This issue can be exploited remotely, and the exploit has been publicly disclosed.Recommendations
As a temporary workaround, consider restricting access to the
/login.php file until a fix is available.
Sanitize the uname input parameter to prevent SQL injection attacks.Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Online Medicine Guide