A vulnerability classified as critical has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /login.php. Performing manipulation of the argument upass results in sql injection.
This vulnerability is known as CVE-2025-60736. Remote exploitation of the attack is possible. No exploit is available.