CVE-2020-22170

CVE-2020-22170 affects PHPGurukul Hospital Management System v4.0. A SQL injection vulnerability exists in hms\get_doctor.php that allows remote unauthenticated attackers to extract sensitive data from the database. Root cause is unsafe handling of user input in the SQL query. Affected component ...