CVE-2025-41004 | Imaster Patient Record Management System Endpoint complaints.php ID sql injection

January 12, 2026 Yanac

A vulnerability has been found in Imaster Patient Record Management System and classified as critical. This affects an unknown function of the file /projects/hospital/admin/complaints.php of the component Endpoint. The manipulation of the argument ID leads to sql injection.

This vulnerability is traded as CVE-2025-41004. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More