Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.1

RemoteClinic 2.0: Malicious Data Injection via User Input

CVE-2025-9802 · published 1 year ago
Summary

A security weakness in RemoteClinic 2.0 allows an attacker to inject malicious data into the system. This can happen when a user enters certain information, potentially allowing an attacker to access sensitive data or take control of the system. To protect your data, update RemoteClinic 2.0 to the latest version or take other recommended security measures.

Original advisory text
A vulnerability was detected in RemoteClinic 2.0. This vulnerability affects unknown code of the file /staff/profile.php. The manipulation of the argument ID results in sql injection. The attack ca...
A vulnerability was detected in RemoteClinic 2.0. This vulnerability affects unknown code of the file /staff/profile.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.1 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published2 Sep 2025
Updated1 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-9802 · NVD
Track software like this
Free during beta