CVE-2025-5363: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /doctor/index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched...

PT-2025-3374

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System version 4.0 Description The issue concerns a Cross Site Scripting XSS vulnerability in the /doctor/index.php file, where an attacker can inject malicious code via the Email parameter. This allows for...

CVE-2024-56997: Improper Neutralization of Input During Web Page Generation

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /doctor/index.php via the 'Email' parameter...