Advisories · Technology

CodeAstro Patient Record Management System.

Every CVE that names CodeAstro Patient Record Management System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-7147 CVE record

CVSS 6.9 Medium

CodeAstro Patient Record Management System login.php sql injection
- CodeAstro Patient Record Management System
- Other injection
- SQL injection
Not analysed yet 7 Jul 2025
CVE-2025-6664 CVE record

CVSS 5.3 Medium

CodeAstro Patient Record Management System cross-site request forgery
- CodeAstro Patient Record Management System
- Cross-site request forgery (CSRF)
- Broken access control
Not analysed yet 25 Jun 2025
CVE-2025-6452 CVE record

CVSS 4.8 Medium

CodeAstro Patient Record Management System Generate New Report Page cross site scripting
- CodeAstro Patient Record Management System
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 22 Jun 2025