Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-41004

Multiple vulnerabilities in Imaster products Open configuration options

Description

Imaster's Patient Records Management System is vulnerable to SQL Injection in the endpoint ‘/projects/hospital/admin/complaints.php’ through the ‘id’ parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Imaster Patient Record Management System

Default version status: unaffected

  • All versionsaffected

References