7 matches found
CVE-2025-70062: Cross-Site Request Forgery (CSRF)
PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery CSRF vulnerability in the 'Add Doctor' module. The application fails to enforce CSRF token validation on the add-doctor.php endpoint. This allows remote attackers to create arbitrary Doctor accounts privileged users ...
CVE-2025-56212: Improper Neutralization of Special Elements used in an SQL Command
phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter...
CVE-2025-56212
The phpgurukul Hospital Management System 4.0 (a PHP and MySQL based system) is vulnerable to SQL Injection within the add-doctor.php file. The root cause is the lack of validation of externally entered SQL statements via the docname parameter. This vulnerability could allow an attacker to execut...
Hospital Management System Cross-site Scripting Vulnerability (CNVD-2026-32774)
Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a cross-site scripting vulnerability. This vulnerability arises from the docname parameters in the /admin/add-doctor.php and /admin/edit-doctor.ph...
CVE-2024-10350 code-projects Hospital Management System add-doctor.php sql injection
A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...
CVE-2024-10350 code-projects Hospital Management System add-doctor.php sql injection
A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...