SQL Injection Vulnerability in Hospital Management System by PHP Gurukul

CVE-2021-35387

What is CVE-2021-35387?

The Hospital Management System version 4.0 by PHP Gurukul is susceptible to an SQL injection vulnerability through the 'view-patient.php' file located in the admin directory. This security flaw allows attackers to manipulate SQL queries, potentially leading to unauthorized access to sensitive patient data. Proper validation and sanitization measures should be implemented to mitigate this risk. For more details, refer to the official documentation and Github repository.

References