CVE Details
Basic Information
| Title | CodeAstro Patient Record Management System login.php sql injection |
|---|---|
| Type | cve |
| Published | 2025-07-07T21:02:06.728Z |
| Modified | 2025-07-07T21:02:06.728Z |
Product Information
| Vendor | CodeAstro |
|---|---|
| Product | Patient Record Management System |
| Version | 1.0 |
CVSS Information
| Base Score | 6.9 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
AI Analysis
| AI Description | A SQL injection vulnerability in the login.php file of CodeAstro Patient Record Management System version 1.0 allows remote attackers to inject malicious SQL code via the uname argument. This vulnerability is critical as it can lead to unauthorized access to sensitive patient data. |
|---|---|
| AI Severity | High |
| AI Vendor | CodeAstro |
| AI Product | Patient Record Management System |
| AI Version | 1.0 |
Affected Products
- CodeAstro Patient Record Management System 1.0
Additional Information
| CWE List | CWE-89, CWE-74 |
|---|---|
| Source | VulDB |
Description
A vulnerability has been found in CodeAstro Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.