CVE-2025-5779 : faille élevée code-projects patient record… (CVSS 7.5)

A vulnerability has been found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /birthing.php. The manipulation of the argument itr_no/comp_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Sévérité

Élevée (CVSS 7.5)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitation active

Non signalée par la CISA

Publication

6 juin 2025

Dernière mise à jour

17 juin 2026

• code-projects patient record management system

• Fiche CVE-2025-5779 sur le NVD (NIST)
• code-projects.org/
• github.com/Thiasap/HCPMS_PHP_vulns/blob/main/sql%20inject…
• vuldb.com/
• vuldb.com/
• vuldb.com/