SQL Injection Vulnerability in Hospital Management System by kishan0725
CVE-2025-63512

6.5MEDIUM

Key Information:

Vendor

kishan0725

Status
Hospital Management System
Vendor
CVE Published:
18 November 2025

What is CVE-2025-63512?

The Hospital Management System by kishan0725 is vulnerable to SQL Injection due to improper input handling in admin-panel1.php. Specifically, the vulnerability arises from the lack of sanitization and parameterization of user input from the demail parameter, which is directly integrated into dynamic SQL queries. This oversight may allow attackers to manipulate the database by injecting malicious SQL commands, potentially leading to unauthorized data access and manipulation.

References

https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospi...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.