Code Projects · Code-Projects Patient Record Management System · CVE-2025-3243
**Name of the Vulnerable Software and Affected Versions**
code-projects Patient Record Management System version 1.0
**Description**
A critical issue affects the processing of the file /dental form.php. The manipulation of the argument `itr no` leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
**Recommendations**
As a temporary workaround, consider disabling the `itr no` argument in the /dental form.php file until a patch is available.
Restrict access to the /dental form.php file to minimize the risk of exploitation.
Avoid using the `itr no` argument in the affected file until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.