CVE-2024-12947

CVE-2024-12947 affects Codezips Hospital Management System 1.0. The vulnerability is an SQL injection in the invo.php file triggered by manipulating the dname parameter, with remote attack possible and public exploits disclosed. Multiple sources corroborate the issue exists in an unknown function...

CVE-2025-2664

CVE-2025-2664 affects CodeZips Hospital Management System 1.0. The vulnerability is in the unknown-functionality of the file /suadpeted.php, where manipulation of the parameter ID leads to a SQL injection. The issue can be exploited remotely and exploit details have been disclosed publicly. Conne...