PT-2025-29900 · Unimax · Unimax Hospital Information System

Yucheng Lin · Published 2025-07-17 · Updated 2025-07-22 · CVE-2025-7735

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions UNIMAX Hospital Information System (affected versions not specified)

Description The Hospital Information System developed by UNIMAX is susceptible to a SQL Injection issue. This allows unauthenticated remote attackers to inject arbitrary SQL commands, potentially leading to unauthorized access and retrieval of database contents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-7735

Affected Products

Unimax Hospital Information System

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-7735 · Security Note
• https://twitter.com/tpx_Security/status/1945888874581856466 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1945717291506618469 · Twitter Post
• https://t.me/cvenotify/129265 · Telegram Post
• https://t.me/cvetracker/28021 · Telegram Post
• https://twitter.com/cracbot/status/1947612631822675973 · Twitter Post
• https://twcert.org.tw/tw/cp-132-10248-f429e-1.html · Note
• https://twcert.org.tw/en/cp-139-10249-5d48c-2.html · Note