SQL Injection Vulnerability in Rickxy Hospital Management System by Rickxy
CVE-2025-63497
Currently unrated
What is CVE-2025-63497?
An SQL injection vulnerability in the patient prescription viewing feature of the Rickxy Hospital Management System version 1.0 enables authenticated users with doctor roles to inject malicious SQL code through the 'pat_number' GET parameter. This lack of proper input sanitization allows attackers to alter database queries, potentially leading to unauthorized data access and manipulation.