CVE-2025-70062: Cross-Site Request Forgery (CSRF)

PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery CSRF vulnerability in the 'Add Doctor' module. The application fails to enforce CSRF token validation on the add-doctor.php endpoint. This allows remote attackers to create arbitrary Doctor accounts privileged users ...

CVE-2025-56212

The phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection due to a lack of validation of externally entered SQL statements in the docname parameter of the add-doctor.php file. This vulnerability allows for potential unauthorized access or manipulation of the underlying MySQL da...

CVE-2025-56212: Improper Neutralization of Special Elements used in an SQL Command

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter...

CVE-2025-5224: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/add-doctor.php. The manipulation of the argument Doctorspecialization leads to sql injection. It is possible to launch the attack remotely...

Hospital Management System Cross-site Scripting Vulnerability (CNVD-2026-32774)

Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a cross-site scripting vulnerability. This vulnerability arises from the docname parameters in the /admin/add-doctor.php and /admin/edit-doctor.ph...

CVE-2024-10350 code-projects Hospital Management System add-doctor.php sql injection

A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2024-10350 code-projects Hospital Management System add-doctor.php sql injection

A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2024-10350: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...

PT-2024-31929

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System version 4.0 Description The issue concerns multiple Cross Site Scripting XSS vulnerabilities. These vulnerabilities exist in the PHPGurukul Hospital Management System via the docname parameter in...

CVE-2024-46238

Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php...

CVE-2024-46238: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php...