Medium severity6.3NVD Advisory· Published Jul 12, 2022· Updated Jun 17, 2026
CVE-2022-2297
CVE-2022-2297
Description
A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/update_user.php?user_id=1. The manipulation of the argument profile_picture with the input <?php phpinfo();?> leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:oretnom23:clinic\'s_patient_management_system:2.0:*:*:*:*:*:*:*
= 2.0+ 1 more
- (no CPE)range: = 2.0
- (no CPE)range: 2.0
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.