CVE-2022-23365

CVE-2022-23365 affects HMS v1.0 and is a SQL injection vulnerability exposed via doctorlogin.php. The root cause is improper handling/validation of inputs in the login mechanism that allows crafted SQL statements to be executed by the database. This aligns with the CVSS metrics: high/critical imp...