CVE-2025-69945

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1...

CVE-2025-69945: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1...

PT-2026-65924

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4.0 Description The software contains a SQL injection flaw, which occurs when an application improperly handles user-supplied data, allowing an attacker to interfere with the queries that an...

CVE-2025-69945

The kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the /doctor/edit-patient.php?editid=1 endpoint. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. The impact is categorized as HIGH with a CVSS 3.1 score of 7.3 , ...

CVE-2025-8955

A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-5584

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as problematic. Affected is an unknown function of the file /doctor/edit-patient.php?editid=2 of the component POST Parameter Handler. The manipulation of the argument patname leads to cross site...

PHPGurukul Hospital Management System 代码注入漏洞

Hospital Management System a PHP and MySQL based hospital management system. Hospital Management System has a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the parameter patname in the file /doctor/edit-patient.php,...

Hospital Management System In PHP Code Execution Vulnerability

Hospital Management System In PHP is a PHP and MySQL based hospital management system. A code execution vulnerability exists in Hospital Management System In PHP, which originates in the hms/doctor/edit-profile.php file could lead to the execution of arbitrary code. No details of the vulnerabilit...

CVE-2024-51360: Improper Control of Generation of Code

An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute arbitrary code via the hms/doctor/edit-profile.php file...

PHPGurukul Hospital Management System 安全漏洞

Hospital Management System In PHP is a PHP and MySQL based hospital management system. A code execution vulnerability exists in Hospital Management System In PHP, which originates in the hms/doctor/edit-profile.php file could lead to the execution of arbitrary code. No details of the vulnerabilit...

CVE-2024-46239

Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php...

PT-2024-31930 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns cross-site scripting vulnerabilities in the PHPGurukul Hospital Management System. These vulnerabilities exist via the docname parameter in...

PHPGurukul Hospital Management System 跨站脚本漏洞

PHPGurukul Hospital Management System is an open source PHP and MySQL based hospital management system from PHPGurukul. A security vulnerability exists in PHPGurukul Hospital Management System version 4.0, which originates from multiple cross-site scripting vulnerabilities in the docname paramete...

PHPGurukul Hospital Management System 安全漏洞

PHPGurukul Hospital Management System is an open source PHP and MySQL based hospital management system from PHPGurukul. A security vulnerability exists in PHPGurukul Hospital Management System version 4.0, which originates from a cross-site scripting attack via the patname, pataddress, and medhis...

CVE-2024-46237: Improper Neutralization of Input During Web Page Generation

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS via the patname, pataddress, and medhis parameters in doctor/add-patient.php and doctor/edit-patient.php...

CVE-2023-4443

A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0/5.0.12. Affected is an unknown function of the file vm\doctor\edit-doc.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. It...

CVE-2023-4443: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0/5.0.12. Affected is an unknown function of the file vm\doctor\edit-doc.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. It...

KiviCare Management System < 3.2.1 - Multiple CSRF

The plugin does not have CSRF checks either flawed or missing completely in various AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. This includes, but is not limited to: Delete arbitrary appointments/medical records/etc, create/update...