A vulnerability categorized as critical has been discovered in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Executing manipulation of the argument ID can lead to sql injection.

The identification of this vulnerability is CVE-2025-11038. The attack may be launched remotely. Furthermore, there is an exploit available.