漏洞描述 Code-Projects Patient Record Management System是Code-Projects开源的一个病历管理系统。 Code-Projects Patient Record Management System 1.0版本存在注入漏洞,该漏洞源于对参数itr_no的错误操作会导致SQL注入。
相关漏洞推荐 泛微e-office /E-mobile/App/System/UserSelect/dept.php 未授权访问漏洞 智邦国际ERP /SYSN/json/pcclient/RecordPrint.ashx SQL 注入漏洞 School Fees Payment System /student.php SQL 注入漏洞(CVE-2025-6403) POC CVE-2025-6403: Code-Projects School Fees Payment System 1.0 - SQL Injection 中成科信票务管理系统 /SystemManager/OrderManager/OrderManager.ashx 文件读取漏洞 亿赛通电子文档安全管理系统 /CDGServer3/logManagement/LogDownLoadService SQL 注入漏洞 HJSoft HCM Human Resources Management System /selfservice/lawresource/downlawbase SQL 注入漏洞(CVE-2025-10197) POC 天地伟业Easy7 downloadWordRecord 任意文件读取漏洞 Code-Projects Project Monitoring System SQL注入漏洞 CodeAstro Gym Management System SQL注入漏洞 CodeAstro Gym Management System SQL注入漏洞 ZYCOO CooVox Series IP Phone System /login 默认口令漏洞 PHPGurukul Employee Record Management System 代码注入漏洞