CVE-2025-5755

HIGH

Open Source Clinic Management System 1.0 - SQL Injection via email Parameter in email_config.php

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-5755. PoCs published by cybertechajju.

AI-analyzed exploit summary This repository contains a Python-based PoC for CVE-2025-5777, a critical memory leak vulnerability in Citrix NetScaler ADC and Gateway. The script scans for and exploits the vulnerability to extract sensitive data such as session cookies and other human-readable strings from memory dumps.

Description

A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /email_config.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Exploits (1)

nomisec WORKING POC 8 stars
by cybertechajju · poc
https://github.com/cybertechajju/cve-2025-5755

This repository contains a Python-based PoC for CVE-2025-5777, a critical memory leak vulnerability in Citrix NetScaler ADC and Gateway. The script scans for and exploits the vulnerability to extract sensitive data such as session cookies and other human-readable strings from memory dumps.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Citrix NetScaler ADC and Gateway
No auth needed
Prerequisites: Network access to the target Citrix NetScaler instance · Python 3.x with aiohttp and colorama libraries
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.311298
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.311298
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.590639
Exploit, Issue Tracking, Third Party Advisory exploit issue-tracking
https://github.com/mysq13/CVE/issues/5

Scores

CVSS v3 7.3
EPSS 0.0036
EPSS Percentile 28.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
nikhil-bhalerao/open_source_clinic_management_system 1.0
Published Jun 06, 2025
Tracked Since Feb 18, 2026