Angeljudesuarez Online Clinic Management System vulnerabilities

5 CVEs affecting Angeljudesuarez Online Clinic Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-11038, published 2025-09-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-40393, published 2024-07-16. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user parameter at login.php.
CVE-2025-10618, published 2025-09-17. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file transact.php. Such manipulation of the…
CVE-2024-48597, published 2024-10-21. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /success/editp.php?action=edit.
CVE-2025-10620, published 2025-09-17. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file /editp2.php. Executing manipulation of the argument…
CVE-2025-11038, published 2025-09-26. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Executing manipulation of the argument ID can…