SQL Injection Vulnerability in phpgurukul Hospital Management System
CVE-2025-56216

8.5HIGH

Key Information:

Vendor

phpgurukul
Status
Hospital Management System
Vendor
CVE Published:
25 August 2025

What is CVE-2025-56216?

The phpgurukul Hospital Management System version 4.0 is exposed to an SQL Injection vulnerability through the 'pagetitle' parameter in the 'about-us.php' file. This flaw could enable attackers to manipulate database queries, potentially leading to unauthorized access to sensitive information and data corruption. Organizations using this system are urged to evaluate their exposure and apply necessary security measures promptly.

References

https://doc.clickup.com/3897127/p/h/3pxt7-11876/0a7da72fe...

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.