SQL Injection Vulnerability in PHPGurukul Hospital Management System v4.0
CVE-2020-22170

7.5HIGH

Key Information:

Vendor
PHPgurukul
Status
Hospital Management System
Vendor
CVE Published:
22 June 2021

Summary

The PHPGurukul Hospital Management System version 4.0 contains a vulnerability in the get_doctor.php file, allowing remote unauthenticated users to perform SQL injection attacks. Exploiting this flaw enables attackers to access sensitive information stored in the database, potentially compromising patient data and violating data protection regulations.

References

https://github.com/itodaro/PHPGurukul_Hospital_Management...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.