Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2020-5192 — SQL Injection in Hospital Management System

CWE-89 — SQL Injection5 documents5 sources
Severity
8.8HIGHNVD
EPSS
41.7%
top 2.57%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Phpgurukul Hospital Management System
Timeline
PublishedJan 6
Latest updateMay 24

Description

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not validating user input, and allow for the application's database and information to be fully compromised.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-986j-7f6m-vx4w: PHPGurukul Hospital Management System in PHP v4↗2022-05-24
▶
CVEList
CVE-2020-5192: PHPGurukul Hospital Management System in PHP v4↗2020-01-06
▶

💥Exploits & PoCs

2
Exploit-DB
Hospital Management System 4.0 - 'searchdata' SQL Injection↗2020-01-02
▶
Nuclei
Hospital Management System 4.0 - SQL Injection
▶
CVE-2020-5192 — SQL Injection | cvebase