CVE-2025-65340

CriticalCVSS 9.8

Published: 29/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

SQL Injection vulnerability in Hospital Management System 4.0. An attacker can inject malicious SQL via the /betweendates-detailsreports.php file.

Unauthorized database access, leakage or modification of medical and personal data.

Implement parameterized SQL queries for all input in betweendates-detailsreports.php.

Original NVD description (English source)

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php.