VULNERABILITY INTELLIGENCE

CVE-2025-57164

CVSS score6.5 MEDIUM

EPSS probability0.42%

CISA KEVNot currently listed

Published2025-10-17

Last modified2026-06-17

Description

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.