PT-2026-65913

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get doctor.php via the parameters doctor and specilizationid...

CVE-2025-70062: Cross-Site Request Forgery (CSRF)

PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery CSRF vulnerability in the 'Add Doctor' module. The application fails to enforce CSRF token validation on the add-doctor.php endpoint. This allows remote attackers to create arbitrary Doctor accounts privileged users ...

CVE-2025-56212: Improper Neutralization of Special Elements used in an SQL Command

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter...

CVE-2025-56212

The phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection due to a lack of validation of externally entered SQL statements in the docname parameter of the add-doctor.php file. This vulnerability allows for potential unauthorized access or manipulation of the underlying MySQL da...

CVE-2025-8955: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-5758

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown part of the file /doctor.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-5758 SourceCodester Open Source Clinic Management System doctor.php sql injection

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown part of the file /doctor.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

SourceCodester Open Source Clinic Management System 注入漏洞

SourceCodester Open Source Clinic Management System is an open source clinic management system from SourceCodester. An injection vulnerability exists in SourceCodester Open Source Clinic Management System version 1.0, which is caused by an incorrect manipulation of the doctorname parameter in the...

CVE-2025-5758: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown part of the file /doctor.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-5224: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/add-doctor.php. The manipulation of the argument Doctorspecialization leads to sql injection. It is possible to launch the attack remotely...

Hospital Management System Cross-site Scripting Vulnerability (CNVD-2026-32774)

Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a cross-site scripting vulnerability. This vulnerability arises from the docname parameters in the /admin/add-doctor.php and /admin/edit-doctor.ph...

CVE-2024-10350 code-projects Hospital Management System add-doctor.php sql injection

A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2024-10350 code-projects Hospital Management System add-doctor.php sql injection

A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2024-10350: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2024-46238: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php...

CVE-2024-46238

Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php...

CVE-2023-4181: Improper Enforcement of Behavioral Workflow

A vulnerability, which was classified as critical, has been found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this issue is some unknown functionality of the file /vm/admin/delete-doctor.php?id=2 of the component Redirect Handler. The manipulation leads ...

Sql injection

In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks...

CVE-2022-30516

The connected sources confirm a SQL injection vulnerability in Hospital-Management-System v1.0, specifically in the editid parameter of doctor.php. The root cause is missing SQL filtering/escaping for editid, enabling attackers to manipulate queries. CVSS data indicates a high-severity, network-e...

CVE-2022-30516: Improper Neutralization of Special Elements used in an SQL Command

In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks...