Description

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.3",
  "pubDate": "2026-08-24T12:16:54.523Z",
  "pubdate": "2026-08-24T12:16:54.523Z",
  "executiveSummary": "An SQL injection vulnerability has been identified within the itsourcecode Online Clinic Management System 1.0. Specifically, this security flaw resides in the Admin Login component, within the success/login.php file, through the manipulation of the Username parameter. The vulnerability allows remote attackers to interact with the underlying database without authorization, potentially bypassing authentication mechanisms, extracting sensitive administrative data, or compromising the integrity of the application data store. The risk implications are severe, as exploitation requires minimal attacker capabilities, and a public exploit has already been disclosed, increasing the probability of malicious targeting. Remote exploitation of this flaw is fully feasible over the network, exposing affected deployments to complete administrative account takeover and database manipulation if left unmitigated.",
  "technicalDetails": "The vulnerability stems from improper neutralization of special elements used in an SQL command within the success/login.php file of the Admin Login component in itsourcecode Online Clinic Management System 1.0. The root cause is the lack of proper input sanitization, parameterization, or context-aware escaping on the Username argument before it is dynamically concatenated or queried against the backend database management system.\nExploitation occurs remotely over the network when an unauthenticated adversary submits crafted input containing malicious SQL syntax payload strings into the Username input field during the authentication process. Because the application fails to handle these metacharacters securely, the injected SQL commands are interpreted directly by the database engine as part of the query logic.\nThe attack flow proceeds as follows: First, the attacker navigates to the administrative login interface managed by success/login.php. Second, the attacker supplies a crafted payload designed to alter the syntax of the authentication query, such as injecting boolean-based conditions or union-based statements that evaluate to true regardless of valid credentials. Third, the backend database executes the modified query, returning a successful authentication status or leaking database contents directly to the attacker.\nThis vulnerability requires no prior authentication or elevated privileges, making it accessible to external threat actors over standard network protocols. Post-exploitation impact includes unauthorized administrative access to the application backend, potential exposure of patient records, staff credentials, and system configurations stored within the database, and possible complete system compromise depending on database user privileges."
}