Approved changes feed: RSS · Atom

cpe:2.3:a:codeastro:patient_record_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodeastro (f92dc1fe-f2d7-58ad-92b0-40a98a9042be)
ProductPatient Record Management System (a177c758-c9a3-5541-91ec-3f9d772e418a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7147 vulnerable 2026-06-03 15:12:30.577326 CodeAstro Patient Record Management System login.php sql injection
HIGH (7.3)
A vulnerability has been found in CodeAstro Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-07T21:02:06.728Z
Updated: 2025-07-08T14:08:42.077Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6664 vulnerable 2026-06-03 15:12:28.400482 CodeAstro Patient Record Management System cross-site request forgery
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in CodeAstro Patient Record Management System 1.0. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-25T20:31:06.261Z
Updated: 2025-06-28T12:39:40.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6452 vulnerable 2026-06-03 15:12:27.632248 CodeAstro Patient Record Management System Generate New Report Page cross site scripting
LOW (2.4)
A vulnerability was found in CodeAstro Patient Record Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the component Generate New Report Page. The manipulation of the argument Patient Name/Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T02:00:10.742Z
Updated: 2025-06-24T08:17:27.284Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.