Campcodes Online Hospital Management System vulnerabilities

CVE-2025-63719 [HIGH] CWE-89 CVE-2025-63719: Campcodes Online Hospital Management System 1.0 is vulnerable to SQL Injection in /admin/index.php v Campcodes Online Hospital Management System 1.0 is vulnerable to SQL Injection in /admin/index.php via the parameter username.

CVE-2025-9753 [MEDIUM] CWE-79 CVE-2025-9753: A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected elemen A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected element is an unknown function of the file /admin/patient-search.php of the component Patient Search Module. Performing manipulation of the argument Search by Name Mobile No results in cross site scripting. The attack may be initiated remotely. The exploit is

CVE-2025-9754 [MEDIUM] CWE-79 CVE-2025-9754: A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.

CVE-2025-6406 [MEDIUM] CWE-74 CVE-2025-6406: A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Manag A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/forgot-password.php. The manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the publ

CVE-2025-6407 [MEDIUM] CWE-74 CVE-2025-6407: A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /user-login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-6408 [MEDIUM] CWE-74 CVE-2025-6408: A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5603 [MEDIUM] CWE-74 CVE-2025-5603: A vulnerability has been found in Campcodes Hospital Management System 1.0 and classified as critica A vulnerability has been found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument full_name/username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and

CVE-2025-5604 [MEDIUM] CWE-74 CVE-2025-5604: A vulnerability was found in Campcodes Hospital Management System 1.0 and classified as critical. Af A vulnerability was found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5602 [MEDIUM] CWE-74 CVE-2025-5602: A vulnerability, which was classified as critical, was found in Campcodes Hospital Management System A vulnerability, which was classified as critical, was found in Campcodes Hospital Management System 1.0. Affected is an unknown function of the file /admin/registration.php. The manipulation of the argument full_name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5365 [MEDIUM] CWE-74 CVE-2025-5365: A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be

CVE-2025-5362 [MEDIUM] CWE-74 CVE-2025-5362: A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the pub

CVE-2025-5361 [MEDIUM] CWE-74 CVE-2025-5361: A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Manag A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. This issue affects some unknown processing of the file /contact.php. The manipulation of the argument fullname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5363 [MEDIUM] CWE-74 CVE-2025-5363: A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /doctor/index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may

CVE-2025-5364 [MEDIUM] CWE-74 CVE-2025-5364: A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as criti A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /doctor/add-patient.php. The manipulation of the argument patname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be u

CVE-2025-5360 [MEDIUM] CWE-74 CVE-2025-5360: A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /book-appointment.php. The manipulation of the argument doctor leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5359 [MEDIUM] CWE-74 CVE-2025-5359: A vulnerability classified as critical has been found in Campcodes Online Hospital Management System A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5298 [MEDIUM] CWE-74 CVE-2025-5298: A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the

CVE-2025-5246 [MEDIUM] CWE-74 CVE-2025-5246: A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /hms/admin/query-details.php. The manipulation of the argument adminremark leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5229 [MEDIUM] CWE-74 CVE-2025-5229: A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been rated as c A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/view-patient.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may b

CVE-2025-5224 [MEDIUM] CWE-74 CVE-2025-5224: A vulnerability classified as critical has been found in Campcodes Online Hospital Management System A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/add-doctor.php. The manipulation of the argument Doctorspecialization leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be u