Phpgurukul Hospital Management System vulnerabilities

CVE-2024-0364 [CRITICAL] CWE-89 CVE-2024-0364: A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management Syste A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file admin/query-details.php. The manipulation of the argument adminremark leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability

CVE-2023-7172 [HIGH] CWE-89 CVE-2023-7172: A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of

CVE-2025-56216 [HIGH] CWE-89 CVE-2025-56216: phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pag phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter.

CVE-2020-22166 [HIGH] CWE-89 CVE-2020-22166: PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\forgot-p PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\forgot-password.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVE-2020-22171 [HIGH] CWE-89 CVE-2020-22171: PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\registra PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\registration.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVE-2020-22169 [HIGH] CWE-89 CVE-2020-22169: PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\appointm PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\appointment-history.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVE-2020-22170 [HIGH] CWE-89 CVE-2020-22170: PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doct PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVE-2020-22174 [HIGH] CWE-89 CVE-2020-22174: PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-app PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVE-2020-22164 [HIGH] CWE-89 CVE-2020-22164: PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_av PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_availability.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVE-2020-22168 [HIGH] CWE-89 CVE-2020-22168: PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\change-e PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\change-emaild.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVE-2020-22172 [HIGH] CWE-89 CVE-2020-22172: PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doct PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVE-2025-56212 [CRITICAL] CWE-89 CVE-2025-56212: phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the d phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter.

CVE-2025-56214 [CRITICAL] CWE-89 CVE-2025-56214: phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the userna phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username parameter.

CVE-2022-46499 [HIGH] CWE-89 CVE-2022-46499: Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_n Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php.

CVE-2020-22175 [HIGH] CWE-89 CVE-2020-22175: PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\be PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsreports.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVE-2020-22173 [HIGH] CWE-89 CVE-2020-22173: PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-pro PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVE-2022-24226 [HIGH] CWE-89 CVE-2022-24226: Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via th Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php.

CVE-2026-2134 [HIGH] CWE-74 CVE-2026-2134: A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0. The affecte A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0. The affected element is an unknown function of the file /hms/admin/manage-doctors.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

CVE-2021-35387 [HIGH] CWE-89 CVE-2021-35387: Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-pat Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php.

CVE-2022-24646 [HIGH] CWE-89 CVE-2022-24646: Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/contact.php via the txtMsg parameters.