CVE-2025-5363 — Injection in Online Hospital Management System

CWE-74 — InjectionCWE-89 — SQL InjectionCWE-684 — Incorrect Provision of Specified Functionality4 documents4 sources
Severity
6.9MEDIUMNVD
EPSS
0.3%
top 48.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Campcodes Online Hospital Management System
Timeline
PublishedMay 30

Description

A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /doctor/index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
Campcodes Online Hospital Management System index.php sql injection↗2025-05-30
▶
GHSA
GHSA-3ff9-v8g6-rg9q: A vulnerability has been found in Campcodes Online Hospital Management System 1↗2025-05-30
▶

📋Vendor Advisories

1
Microsoft
Incorrect cipher key & IV length processing↗2023-10-10
▶