CVE-2025-63512

Hospital Management System v4 contains an SQL Injection in admin-panel1.php (deleting doctor logic) where the demail input is not sanitized/parameterized before being used in a dynamic SQL query. This could allow an attacker to manipulate the query and affect the database. Public sources consiste...