Hospital Management System SQL Injection Vulnerability

Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a SQL injection vulnerability. This vulnerability arises from the lack of validation for external SQL statements in the parameter ID of the file...

PT-2026-6960

A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0. The affected element is an unknown function of the file /hms/admin/manage-doctors.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has bee...

CVE-2026-2134: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0. The affected element is an unknown function of the file /hms/admin/manage-doctors.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has bee...

Hospital Management System manage-doctors.php File Cross-Site Scripting Vulnerability

Hospital Management System a hospital management system. Hospital Management System has a cross-site scripting vulnerability that originates from a cross-site scripting vulnerability in the Doctor Name parameter of the /hospital/hms/admin/manage-doctors.php file. An attacker can exploit this...

CVE-2024-12983: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. This affects an unknown part of the file /hospital/hms/admin/manage-doctors.php of the component Edit Doctor Details Page. The manipulation of the argument Doctor Name leads to cross site...