CVE-2025-6406

CVE-2025-6406 affects Campcodes Online Hospital Management System 1.0. The file /hms/forgot-password.php contains a vulnerability where manipulating the fullname argument leads to SQL injection. Documents describe remote exploitation and public disclosure of the exploit. Affected functionality is...

CVE-2025-6406 Campcodes Online Hospital Management System forgot-password.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/forgot-password.php. The manipulation of the argument fullname leads to sql injection. The attack may be...

CVE-2025-6406 Campcodes Online Hospital Management System forgot-password.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/forgot-password.php. The manipulation of the argument fullname leads to sql injection. The attack may be...

CVE-2025-6407: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /user-login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-6406: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/forgot-password.php. The manipulation of the argument fullname leads to sql injection. The attack may be...

CampCodes Online Hospital Management System 注入漏洞

CampCodes Online Hospital Management System is an online hospital management system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Hospital Management System, which originates from a SQL injection due to an incorrect operation of the parameter Userna...

PT-2025-26506 · Campcodes · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /hms/forgot-password.php. The manipulation of the fullname argument leads to...

PT-2025-26507 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /user-login.php. The manipulation of the Username argument leads to SQL injection. It is...

CVE-2025-6408: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The explo...

Stored-XSS-Hospital-Management

It is an offensive tool for web application exploitation. This r...

CVE-2025-6339

A vulnerability was found in ponaravindb Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /func3.php. The manipulation of the argument username1 leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-6339

A vulnerability was found in ponaravindb Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /func3.php. The manipulation of the argument username1 leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-6339 ponaravindb Hospital Management System func3.php sql injection

A vulnerability was found in ponaravindb Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /func3.php. The manipulation of the argument username1 leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-6339 ponaravindb Hospital Management System func3.php sql injection

A vulnerability was found in ponaravindb Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /func3.php. The manipulation of the argument username1 leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-6339

Ponaravindb Hospital Management System v1.0 is affected by a SQL injection in /func3.php via the username1 parameter. The issue allows remote exploitation and, according to the sources, an exploit has been disclosed publicly. CVSS data indicate high/critical impact with potential compromises to c...

CVE-2025-6339: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ponaravindb Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /func3.php. The manipulation of the argument username1 leads to sql injection. The attack may be launched remotely. The exploit...

Hospital Management System 注入漏洞

Hospital Management System is a hospital management software by Pon Aravind Boominathan, an individual developer. An injection vulnerability exists in Hospital Management System version 1.0, which results from SQL injection due to incorrect manipulation of parameter username1 in file /func3.php...

PT-2025-26308 · Unknown · Ponaravindb Hospital Management System

Name of the Vulnerable Software and Affected Versions: ponaravindb Hospital Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /func3.php. The manipulation of the username1 argument leads to SQL injection. The attack may be launched remotely...

PT-2025-25612 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hostel Management System version 1.0 Description: A critical issue affects the processing of the file /includes/login.inc.php, where the manipulation of the student roll no argument leads to SQL injection. The attack can be initiat...

Hospital Management System edit-patient.php file cross-site scripting vulnerability

Hospital Management System a PHP and MySQL based hospital management system. Hospital Management System has a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the parameter patname in the file /doctor/edit-patient.php,...