CVE-2025-69943

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...

CVE-2025-69942

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...

CVE-2025-69949

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...

CVE-2025-69949

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...

PT-2026-65925

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4.0 Description The software contains a SQL Injection flaw in the 'check availability.php' endpoint. This issue occurs when the application improperly handles the emailid and email parameters,...

CVE-2025-65340

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php...

PT-2026-65923

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4.0 Description An issue exists where the software is susceptible to SQL Injection, a technique that allows an attacker to interfere with the queries that an application makes to its database. This...

CVE-2025-65340: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php...

CVE-2025-69944: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter...

CVE-2025-69943: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...

CVE-2025-69945: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1...

CVE-2025-69942: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...

CVE-2025-69945

The kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the /doctor/edit-patient.php?editid=1 endpoint. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. The impact is categorized as HIGH with a CVSS 3.1 score of 7.3 , ...

CVE-2025-69949: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...

CVE-2025-69949

The kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection within the check_availability.php component. The vulnerability is triggered through the emailid and email parameters. This flaw allows for the improper neutralization of special elements used in an SQL command, potential...

CVE-2025-69949

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...

CVE-2025-69942

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...

PT-2026-65912

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4.0 Description The software contains a SQL Injection flaw, which occurs when an application improperly handles user-supplied data in a database query, allowing an attacker to manipulate the query...

PT-2026-65906

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4.0 Description The software contains a SQL Injection flaw in the '/betweendates-detailsreports.php' endpoint. SQL Injection is a technique where malicious SQL statements are inserted into entry...

CVE-2025-65340

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php...