Kishan0725 Hospital Management System
14 CVEs affecting Kishan0725 Hospital Management System. Latest disclosed: 2025-11-18. Critical: 6, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-41530 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php. |
CVE-2023-41528 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters. |
CVE-2023-41527 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php. |
CVE-2023-41526 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters. |
CVE-2023-41525 | Critical | 9.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php. |
CVE-2023-43958 | Critical | 9.8 | 2025-04-22 | An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthenticated a… |
CVE-2023-41532 | High | 8.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact parameter in doctorsearch.php. |
CVE-2023-41531 | High | 8.8 | 2025-08-07 | Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters. |
CVE-2025-63513 | Medium | 6.5 | 2025-11-18 | kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functionality. |
CVE-2025-63512 | Medium | 6.5 | 2025-11-18 | kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails… |
CVE-2023-40992 | Medium | 6.5 | 2025-08-07 | Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter. |
CVE-2024-45983 | Medium | 6.3 | 2024-09-26 | A Cross-Site Request Forgery (CSRF) vulnerability exists in kishan0725's Hospital Management System version 6.3.5. The vulnerability allows an attacker to craf… |
CVE-2025-63514 | Medium | 6.1 | 2025-11-18 | kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the email parameter. |
CVE-2023-41529 | Medium | 6.1 | 2025-08-07 | Hospital Management System v4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in func2.php via the fname and lname parameters. |