CVE-2025-3096criticalCWE-89

Clinics Patient Management System SQL Injection

43Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 9.3epss 1.4%

from disclosure to weapon0 days

Published on NVDApr 1

metasploitJan 4

exploitation probability

1.4%top 29% of all CVEs

observed exploitation

nono source reports it

Clinic’s Patient Management System versions 2.0 suffers from a SQL injection vulnerability in the login page.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Affected products

References