PT-2025-45480 · Sourcecodester · Pqms

Published 2025-11-07 · Updated 2025-11-08 · CVE-2025-63718

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester PQMS version 1.0

Description A SQL injection issue exists in the Patient Queue Management System. The api patient schedule.php endpoint is affected because the appointmentID parameter does not receive proper sanitization, potentially allowing attackers to execute arbitrary SQL commands.

Recommendations Apply sanitization measures to the appointmentID parameter in the api patient schedule.php endpoint.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-63718

Affected Products

Pqms

References · 7

• 🔥 https://github.com/floccocam-cpu/CVE-Research-2025/blob/main/CVE-2025-63718/README8.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63718 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63718 · Vendor Advisory
• https://sourcecodester.com/php/18348/patients-waiting-area-queue-management-system.html · Note
• https://twitter.com/CVEnew/status/1986861778769252662 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1986956699375178192 · Twitter Post
• https://t.me/CVEtracker/36787 · Telegram Post