Description
Code-Projects Patient Record Management System是Code-Projects开源的一个病历管理系统。 Code-Projects Patient Record Management System 1.0版本存在注入漏洞，该漏洞源于对参数itr_no的错误操作会导致SQL注入。
Code-Projects Patient Record Management System 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://vuldb.com/zh/?id.304974
https://cve.circl.lu/vuln/cnvd-2025-30002
https://avd.aliyun.com/detail?id=AVD-2025-3347
https://security.zone.ci/aliyun/ali_nvd/381390.html
https://github.com/advisories/GHSA-9qjr-82wx-8hcx
https://www.enigma-global.com/cve/5130177
https://cert.kenet.or.ke/cve-2025-3243-code-projects-patient-record-management-system-sql-injection-vulnerability
https://stack.watch/product/code-projects/patient-record-management-system/
https://code-projects.org/patient-record-management-system-in-php-with-source-code/
https://www.sentinelone.com/vulnerability-database/cve-2026-6006/
https://nvd.nist.gov/vuln/detail/cve-2025-3208
https://app.opencve.io/cve/?vendor=code-projects&product=patient_record_management_system&page=1