A vulnerability classified as critical was found in SourceCodester Eye Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file /main/search_index_Diagnosis.php. Such manipulation of the argument Search leads to sql injection.
This vulnerability is referenced as CVE-2025-9771. It is possible to launch the attack remotely. Furthermore, an exploit is available.