SQL Injection Vulnerability in Hospital Management System by kishan0725
CVE-2025-69944

7.3HIGH

Key Information:

Vendor

kishan0725

Status
Hospital Management System
Vendor
CVE Published:
29 July 2026

What is CVE-2025-69944?

The Hospital Management System version 4.0 by kishan0725 contains a SQL injection vulnerability in the view-medhistory.php script that arises from improper handling of the viewid parameter. This flaw allows attackers to manipulate SQL queries, potentially leading to unauthorized access to sensitive medical records. Exploiting this vulnerability can result in data breaches and compromise patient privacy. It is crucial for users and administrators to review their installations and apply necessary security measures.

References

https://github.com/um-dsp/TaintRadar/blob/main/sql_inject...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.