CVE-2025-5780

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view_dental.php. The manipulation of the argument itr_no leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89
• CWE-89

• https://code-projects.org/Product
• https://github.com/Thiasap/HCPMS_PHP_vulns/blob/main/sql%20injection%20in%20view_dental.php.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.311324Permissions Required, VDB Entry
• https://vuldb.com/?id.311324Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.591128Third Party Advisory, VDB Entry
• https://github.com/Thiasap/HCPMS_PHP_vulns/blob/main/sql%20injection%20in%20view_dental.php.pdfExploit, Third Party Advisory

Published

Jun 6, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-57794Explorance Blue versions prior to 8.14.9 contain an authenti…9.1
• CVE-2025-57795Explorance Blue versions prior to 8.14.13 contain an authent…9.9
• CVE-2025-57796Explorance Blue versions prior to 8.14.12 use reversible sym…6.8
• CVE-2025-57797Incorrect privilege assignment vulnerability exists in ScanS…8.5
• CVE-2025-57798Joplin is an open source note-taking and to-do application t…5.5
• CVE-2025-57799StreamVault is a multi-platform video parsing and downloadin…8.7
• CVE-2025-57800Audiobookshelf is an open-source self-hosted audiobook serve…8.8
• CVE-2025-57801gnark is a zero-knowledge proof system framework. In version…9.1
• CVE-2025-57802Airlink's Daemon interfaces with Docker and the Panel to pro…8.7
• CVE-2025-57803ImageMagick is free and open-source software used for editin…8.8
• CVE-2025-57804h2 is a pure-Python implementation of a HTTP/2 protocol stac…6.9
• CVE-2025-57805The Scratch Channel is a news website. In versions 1 and 1.1…8.7