CVE-2025-6768

A vulnerability classified as critical has been found in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is the function findAllHosByCondition of the file HospitalServiceImpl.java. The manipulation of the argument hospitalName leads to sql injection. It is possible to...

CVE-2025-6768

The CVE-2025-6768 affects sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8, specifically the HospitalServiceImpl.java::findAllHosByCondition function. The root cause is manipulation of the hospitalName argument leading to SQL injection, enabling remote exploitation. Multiple con...