CVE-2025-5755

HIGH

Nikhil-bhalerao Open Source Clinic Management System - Injection

Title source: rule

Description

A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /email_config.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Exploits (1)

nomisec WORKING POC 8 stars
by cybertechajju · poc
https://github.com/cybertechajju/cve-2025-5755

References (5)

Scores

CVSS v3 7.3
EPSS 0.0014
EPSS Percentile 34.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
nikhil-bhalerao/open_source_clinic_management_system 1.0
Published Jun 06, 2025
Tracked Since Feb 18, 2026