CVE-2025-9770

CVE-2025-9770 affects Campcodes Hospital Management System 1.0. The Admin Dashboard Login’s /admin/ backend is vulnerable via manipulation of the Password argument, causing SQL injection. This can be exploited remotely and, per sources, an exploit is publicly available. Connected documents confir...

CVE-2025-9746

CVE-2025-9746 affects Campcodes Hospital Management System 1.0. The vulnerability is a cross-site scripting (XSS) in the admin/edit-doctor-specialization.php page caused by manipulation of an element on the Edit Doctor Specialization Page. It can be exploited remotely, and an exploit/PoC is publi...