CVE-2025-69943

CriticalCVSS 9.8

Published: 29/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

The kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in get_doctor.php via the doctor and specilizationid parameters.

An attacker can exploit this to gain unauthorized access to doctor data or other database information, potentially compromising system integrity.

Immediately validate and sanitize input for doctor and specilizationid parameters in get_doctor.php, and use parameterized queries.

Original NVD description (English source)

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_doctor.php via the parameters doctor and specilizationid.