A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

A SQL injection vulnerability has been identified in itsourcecode Online Clinic Management System version 1.0. The vulnerability exists in the file success/login.php within the Admin Login component. An attacker can manipulate the Username argument to perform SQL injection attacks remotely. The exploit has been publicly disclosed and is available for use, making it an active threat. No authentication is required to exploit this vulnerability, increasing its severity. The issue affects an unspecified section of the login handling code. Successful exploitation could allow unauthorized access to the underlying database. Organizations using this system are advised to apply patches or mitigations promptly.