Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-63514 1 Kishan0725 1 Hospital Management System 2025-11-21 6.1 Medium
kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the email parameter.
CVE-2025-63512 1 Kishan0725 1 Hospital Management System 2025-11-20 6.5 Medium
kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL query.
CVE-2025-63513 1 Kishan0725 1 Hospital Management System 2025-11-20 6.5 Medium
kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functionality.