CRITICAL Published December 2, 2025

CVE-2025-60736

code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter.

CVSS base score

9.8 (v3.1)

Severity

CRITICAL

Attack vector

Network

Weakness

CWE-89

Last modified

November 4, 2026

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

anisha online medicine guide

View full NVD advisory →

← Back to CVE watch