CVE-2025-69942

CriticalCVSS 9.8

Published: 29/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

kishan0725 Hospital Management System 4.0 contains a SQL injection vulnerability in /hms/doctor/view-patient.php via the viewid parameter.

An attacker can remotely read, modify, or delete database data, potentially compromising patient data confidentiality and integrity.

Immediately update the system to the latest version or apply a patch to prevent SQL injection, e.g., by using prepared statements.

Original NVD description (English source)

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1.