CVE-2023-41532

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...

CVE-2023-41532

creationtimestamp| type| source ---|---|--- 2025-08-07 22:04:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvtqmb4lw42p 2025-11-13 19:19:20+00:00| seen| https://gist.github.com/celbahraoui-chaima/209029209e83fd0f85e06f0b4ef4f7ef...

CVE-2023-41532

Hospital Management System v4 has a SQL injection vulnerability in the doctorsearch.php endpoint via the doctor_contact parameter. Affected component is the query construction in doctorsearch.php; root cause is lack of input sanitization. CVSS v3.1 base score 8.8 (HIGH) with network attack vector...