CVE-2025-5758

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown part of the file /doctor.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

Sql injection

In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks...

CVE-2022-30516

The connected sources confirm a SQL injection vulnerability in Hospital-Management-System v1.0, specifically in the editid parameter of doctor.php. The root cause is missing SQL filtering/escaping for editid, enabling attackers to manipulate queries. CVSS data indicates a high-severity, network-e...