CVE-2025-5728: A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management System 1.0. This vulnerability affects unknown code of the file /manage_website.php. The manipulatio...

Summary

A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management System 1.0. This vulnerability affects unknown code of the file /manage_website.php. The manipulation of the argument website_image leads to unrestricted upload. The attack can be initiated remotely. The...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
nikhil-bhalerao	open_source_clinic_management_system	1.0 `cpe:2.3:a:nikhil-bhalerao:open_source_clinic_management_system:1.0:::::::*`

Original advisory text

A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management System 1.0. This vulnerability affects unknown code of the file /manage_website.php. The manipulatio...

A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management System 1.0. This vulnerability affects unknown code of the file /manage_website.php. The manipulation of the argument website_image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

References

https://vuldb.com/?ctiid.311248 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.311248 Third Party Advisory VDB Entry
https://vuldb.com/?submit.590578 Third Party Advisory VDB Entry
https://www.sourcecodester.com/ Product
https://github.com/mysq13/CVE/issues/4 Exploit Issue Tracking Third Party Advisory