Skip to content
OpenAdvisories

Product · SourceCodester

Clinics Patient Management System

19 known vulnerabilities.

Clinics Patient Management System at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

19 results · Feed

  • Medium 4.3

    SourceCodester Clinics Patient Management System congratulations.php redirect

    A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument goto_page leads to open redirect. It is…

  • Low 3.5

    SourceCodester Clinics Patient Management System users.php cross site scripting

    A vulnerability was found in SourceCodester Clinics Patient Management System 2.0 and classified as problematic. This issue affects some unknown processing of the file /users.php. The manipulation of the argument message leads to cross site scripting. The att…

  • Medium 6.3

    SourceCodester Clinics Patient Management System get_packings.php sql injection

    A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pms/ajax/get_packings.php. The manipulation of the argument medicine_id leads to sql inject…

  • Medium 6.3

    SourceCodester Clinics Patient Management System check_user_name.php sql injection

    A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System 1.0. This vulnerability affects unknown code of the file /pms/ajax/check_user_name.php. The manipulation of the argument user_name leads to sql injection. The…

  • Medium 6.3

    SourceCodester Clinics Patient Management System check_medicine_name.php sql injection

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/check_medicine_name.php. The manipulation of the argument user_name leads to sql inj…

  • Medium 5.3

    SourceCodester Clinics Patient Management System user_images direct request

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user_images/. The manipulation leads to direct request. The attack can be initiated re…

  • Low 3.5

    SourceCodester Clinics Patient Management System update_medicine.php cross site scripting

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /update_medicine.php. The manipulation of the argument medicine_name leads to cross site scripti…

  • Medium 6.3

    SourceCodester Clinics Patient Management System update_medicine.php sql injection

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /update_medicine.php. The manipulation of the argument hidden_id leads to sql inject…

  • Medium 6.3

    SourceCodester Clinics Patient Management System medicines.php sql injection

    A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /medicines.php. The manipulation of the argument medicine_name leads to s…

  • Medium 4.3

    SourceCodester Clinics Patient Management System User Page users.php cross-site request forgery

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file users.php of the component User Page. The manipulation leads to cross-site request forg…

  • Medium 6.3

    SourceCodester Clinics Patient Management System new_prescription.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is some unknown functionality of the file /new_prescription.php. The manipulation of the argument patient leads t…

  • Medium 6.3

    SourceCodester Clinics Patient Management System patients.php patient_name sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is the function patient_name of the file patients.php. The manipulation leads to sql injection. The attack may be…

  • Medium 6.3

    SourceCodester Clinics Patient Management System get_patient_history.php sql injection

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/get_patient_history.php. The manipulation of the argument patient_id leads to sql in…

  • Medium 6.3

    SourceCodester Clinics Patient Management System print_patients_visits.php sql injection

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /print_patients_visits.php. The manipulation of the argument from/to leads to sql injectio…

  • Medium 6.3

    SourceCodester Clinics Patient Management System update_user.php sql injection

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as critical. Affected is an unknown function of the file update_user.php. The manipulation of the argument user_id leads to sql injection. It is possible…

  • Medium 6.3

    SourceCodester Clinics Patient Management System medicine_details.php sql injection

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file medicine_details.php. The manipulation of the argument medicine leads to sql inj…

  • High 7.3

    SourceCodester Clinics Patient Management System Login index.php sql injection

    A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument user_name leads to …

  • High 7.3

    SourceCodester Clinics Patient Management System Login Page index.php sql injection

    A vulnerability has been found in SourceCodester Clinics Patient Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pms/index.php of the component Login Page. The manipulation of the argum…

  • Medium 6.3
    CVE-2022-2297 Public exploit

    SourceCodester Clinics Patient Management System unrestricted upload

    A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/update_user.php?user_id=1. The manipulation of the argument profile_picture with the input <…