CVE-2025-5755
A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /email_config.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
- Affected products
- Sourcecodester Open Source Clinic Management System
- Nikhil-bhalerao Open Source Clinic Management System
- = 1.0
- CVSS 2.0
- 7.5 HIGH
- CVSS 3.1
- 7.3 HIGH
- EPSS
- 0.4% (31th percentile)
- Weakness
- CWE-74, CWE-89
- NVD status
- Analyzed
- Published
- 2025-06-06
CVE-2025-5755 at NVD
1 known exploit for CVE-2025-5755
Proof-of-concept code and exploit modules indexed by Sploitus