CVE-2023-40992

Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter...

CVE-2023-41532

Hospital Management System v4 has a SQL injection vulnerability in the doctorsearch.php endpoint via the doctor_contact parameter. Affected component is the query construction in doctorsearch.php; root cause is lack of input sanitization. CVSS v3.1 base score 8.8 (HIGH) with network attack vector...

CVE-2023-41528

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters...

PT-2025-32296 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection issue through the password2 parameter within the func.php file. This allows for potential unauthorized database access or...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of parameter password2 in file func.php...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version 4, which originates from SQL injection due to incorrect manipulation of parameter password2 in file...

CVE-2023-41530

The CVE-2023-41530 entry describes a SQL injection in Hospital Management System v4 via the app_contact parameter in appsearch.php. Affected software: Hospital Management System v4. Vulnerable component: appsearch.php (parameter: app_contact). Root cause: improper handling of user input leading t...

CVE-2023-41526

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters...

CVE-2023-40992

Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter. Root cause: insufficient input validation in the password2 field allows unparameterized SQL to be constructed. Potential impact (as stated in the sources): una...

CVE-2023-41530

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...

CVE-2023-41525

CVE-2023-41525 affects Hospital Management System v4, with a SQL injection in the Patient Search Module via the patient_contact parameter in patientsearch.php. The CVSS v3.1 vector shows Network access, no privileges, high impact on confidentiality, integrity, and availability (base score 9.8). S...

CVE-2023-41532

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...

PT-2025-32298 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple cross-site scripting XSS vulnerabilities in the func2.php file. These vulnerabilities are triggered through the fname and lname parameters...

CVE-2025-7604

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely...

CVE-2025-7604

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely...

CVE-2025-7604 PHPGurukul Hospital Management System user-login.php sql injection

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely...

CVE-2025-7604 PHPGurukul Hospital Management System user-login.php sql injection

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely...

PT-2025-29462 · Phpgurukul · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: A vulnerability exists in PHPGurukul Hospital Management System 4.0 related to SQL injection. The issue is located in the /user-login.php file, where manipulation of the Username...

CVE-2025-7176

A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file view-medhistory.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched remotely...

CVE-2025-7176

A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file view-medhistory.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched remotely...