CVE-2025-5728 | SourceCodester Open Source Clinic Management System 1.0 /manage_website.php website_image unrestricted upload

A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management System 1.0. This vulnerability affects unknown code of the file /manage_website.php. The manipulation of the argument website_image leads to unrestricted upload.

This vulnerability was named CVE-2025-5728. The attack can be initiated remotely. Furthermore, there is an exploit available.