code-projects patient record management system vulnerabilities

Latest code-projects patient record management system CVEs

Newest publication first · page 1 of 2

1. CVE-2026-6006 code-projects Patient Record Management System edit_hpatient.php sql injection

   Published 2026-04-10

   Medium·CVSS 5.3 EPSS 0.20%

   A vulnerability has been found in code-projects Patient Record Management System 1.0. The impacted element is an unknown function of the file /edit_hpatient.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

2. CVE-2026-6005 code-projects Patient Record Management System hematology_print.php sql injection

   Published 2026-04-10

   Medium·CVSS 5.3 EPSS 0.20%

   A flaw has been found in code-projects Patient Record Management System 1.0. The affected element is an unknown function of the file /hematology_print.php. Executing a manipulation of the argument hem_id can lead to sql injection. It is possible to launch the attack remotely. The...

3. CVE-2026-5960 code-projects Patient Record Management System SQL Database Backup File hcpms.sql information disclosure

   Published 2026-04-09

   Medium·CVSS 5.3 EPSS 0.27%

   A weakness has been identified in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /db/hcpms.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. The attack can be launched...

4. CVE-2026-2706 code-projects Patient Record Management System fecalysis_not.php sql injection

   Published 2026-02-19

   Medium·CVSS 5.3 EPSS 0.41%

   A flaw has been found in code-projects Patient Record Management System 1.0. This affects an unknown function of the file /fecalysis_not.php. This manipulation of the argument comp_id causes sql injection. The attack can be initiated remotely. The exploit has been published and m...

5. CVE-2025-7754 code-projects Patient Record Management System xray_form.php sql injection

   Published 2025-07-17

   Medium·CVSS 5.3 EPSS 0.38%

   A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /xray_form.php. The manipulation of the argument itr_no leads to sql injection. The attack can be initiated remot...

6. CVE-2025-5857 code-projects Patient Record Management System urinalysis_record.php sql injection

   Published 2025-06-09

   Medium·CVSS 5.3 EPSS 0.50%

   A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /urinalysis_record.php. The manipulation of the argument itr_no leads to sql injection. The attack may be initiated r...

7. CVE-2025-5780 code-projects Patient Record Management System view_dental.php sql injection

   Published 2025-06-06

   Medium·CVSS 5.3 EPSS 0.43%

   A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view_dental.php. The manipulation of the argument itr_no leads to sql injection. The attack may be launche...

8. CVE-2025-5779 code-projects Patient Record Management System birthing.php sql injection

   Published 2025-06-06

   Medium·CVSS 5.3 EPSS 0.43%

   A vulnerability has been found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /birthing.php. The manipulation of the argument itr_no/comp_id leads to sql injection. The attac...

9. CVE-2025-5762 code-projects Patient Record Management System view_hematology.php sql injection

   Published 2025-06-06

   Medium·CVSS 5.3 EPSS 0.45%

   A vulnerability, which was classified as critical, was found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file view_hematology.php. The manipulation of the argument itr_no leads to sql injection. It is possible to launch the attack...

10. CVE-2025-5674 code-projects Patient Record Management System urinalysis_form.php sql injection

    Published 2025-06-05

    Medium·CVSS 5.3 EPSS 0.50%

    A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file urinalysis_form.php. The manipulation of the argument urinalysis_id leads to sql injection. The attack may...

11. CVE-2025-5627 code-projects Patient Record Management System sputum_form.php sql injection

    Published 2025-06-05

    Medium·CVSS 5.3 EPSS 0.43%

    A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /sputum_form.php. The manipulation of the argument itr_no leads to sql injection. The attack can be launc...

12. CVE-2025-4459 code-projects Patient Record Management System fecalysis_form.php sql injection

    Published 2025-05-09

    Medium·CVSS 5.3 EPSS 0.92%

    A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file fecalysis_form.php. The manipulation of the argument itr_no leads to sql injection. The attack may be l...

13. CVE-2025-4458 code-projects Patient Record Management System edit_upatient.php sql injection

    Published 2025-05-09

    Medium·CVSS 5.3 EPSS 0.92%

    A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edit_upatient.php. The manipulation of the argument ID leads to sql injection. The attack can...

14. CVE-2025-4197 code-projects Patient Record Management System edit_xpatient.php sql injection

    Published 2025-05-02

    Medium·CVSS 5.3 EPSS 0.53%

    A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file /edit_xpatient.php. The manipulation of the argument lastname leads to sql injection. It is possible to launch the attack remot...

15. CVE-2025-4021 code-projects Patient Record Management System edit_spatient.php sql injection

    Published 2025-04-28

    Medium·CVSS 5.3 EPSS 0.46%

    A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /edit_spatient.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remo...

16. CVE-2025-3955 codeprojects Patient Record Management System edit_rpatient.php.php sql injection

    Published 2025-04-27

    Medium·CVSS 5.3 EPSS 0.46%

    A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This affects an unknown part of the file /edit_rpatient.php.php. The manipulation of the argument id/lastname leads to sql injection. It is possible to initiate the...

17. CVE-2025-3685 code-projects Patient Record Management System edit_fpatient.php sql injection

    Published 2025-04-16

    Medium·CVSS 5.3 EPSS 0.55%

    A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file /edit_fpatient.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. T...

18. CVE-2025-3348 code-projects Patient Record Management System edit_dpatient.php sql injection

    Published 2025-04-07

    Medium·CVSS 5.3 EPSS 0.55%

    A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. This vulnerability affects unknown code of the file /edit_dpatient.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The ex...

19. CVE-2025-3347 code-projects Patient Record Management System dental_pending.php sql injection

    Published 2025-04-07

    Medium·CVSS 5.3 EPSS 0.55%

    A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /dental_pending.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. T...

20. CVE-2025-3304 code-projects Patient Record Management System dental_not.php sql injection

    Published 2025-04-05

    Medium·CVSS 5.3 EPSS 0.42%

    A vulnerability, which was classified as critical, was found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /dental_not.php. The manipulation of the argument itr_no leads to sql injection. It is possible to initiate the attack remo...

21. CVE-2025-3303 code-projects Patient Record Management System birthing_record.php sql injection

    Published 2025-04-05

    Medium·CVSS 5.3 EPSS 0.47%

    A vulnerability, which was classified as critical, has been found in code-projects Patient Record Management System 1.0. Affected by this issue is some unknown functionality of the file /birthing_record.php. The manipulation of the argument itr_no leads to sql injection. The atta...

22. CVE-2025-3243 code-projects Patient Record Management System dental_form.php sql injection

    Published 2025-04-04

    Medium·CVSS 5.3 EPSS 0.61%

    A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dental_form.php. The manipulation of the argument itr_no/dental_no leads to sql injection. The attack may be initiat...

23. CVE-2025-3211 code-projects Patient Record Management System birthing_print.php sql injection

    Published 2025-04-04

    Medium·CVSS 5.3 EPSS 0.47%

    A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /birthing_print.php. The manipulation of the argument itr_no/birth_id leads to sql injection. It is possible to initiate the attac...

24. CVE-2025-3210 code-projects Patient Record Management System birthing_pending.php sql injection

    Published 2025-04-04

    Medium·CVSS 5.3 EPSS 0.47%

    A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /birthing_pending.php. The manipulation of the argument birth_id leads to sql injection. The attack may...

25. CVE-2025-3209 code-projects Patient Record Management System add_patient.php sql injection

    Published 2025-04-04

    Medium·CVSS 5.3 EPSS 0.58%

    A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add_patient.php. The manipulation of the argument itr_no leads to sql injection. The attack c...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.