CVE-2025-69944

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4.0

Description An issue exists where the software is susceptible to SQL Injection, a technique that allows an attacker to interfere with the queries that an application makes to its database. This occurs at the 'view-medhistory.php' endpoint through the viewid parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the viewid parameter in the 'view-medhistory.php' endpoint until the issue is resolved.