Nikhil Bhalerao

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-5716 1Nikhil Bhalerao 1Open Source Clinic Management System Apr 29, 2026 Jun 6, 2025 5.5 MEDIUM· v4 7.3 HIGH· v3 7.5 HIGH· v2 A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument email leads to sq...Show more A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2025-5712 1Nikhil Bhalerao 1Open Source Clinic Management System Apr 29, 2026 Jun 6, 2025 5.5 MEDIUM· v4 7.3 HIGH· v3 7.5 HIGH· v2 A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /appointment.php. The manipulat...Show more A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /appointment.php. The manipulation of the argument patient leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2024-40402 1Nikhil Bhalerao 1Simple Library Management System Apr 23, 2025 Jul 17, 2024 N/A· v4 6.3 MEDIUM· v3 N/A· v2 A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attacke...Show more A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries.Show less
CVE-2024-40110 1Nikhil Bhalerao 1Poultry Farm Management System Apr 23, 2025 Jul 12, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Sourcecodester Poultry Farm Management System v1.0 contains an Unauthenticated Remote Code Execution (RCE) vulnerability via the productimage parameter at /farm/product.php.
CVE-2024-4809 1Nikhil Bhalerao 1Open Source Clinic Management System Feb 11, 2025 May 14, 2024 5.3 MEDIUM· v4 9.8 CRITICAL· v3 6.5 MEDIUM· v2 A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file setting.php. The manipulation o...Show more A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file setting.php. The manipulation of the argument logo leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263929 was assigned to this vulnerability.Show less
CVE-2021-45003 1Nikhil Bhalerao 1Laundry Booking Management System Apr 22, 2025 Jan 10, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Laundry Booking Management System 1.0 (Latest) and previous versions are affected by a remote code execution (RCE) vulnerability in profile.php through the "image" parameter that can execute a webshell payload.

Previous 12