PT-2025-32296 · Unknown · Hospital Management System

Published 2025-08-07 · Updated 2025-08-07 · CVE-2023-41527

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hospital Management System version 4

Description The Hospital Management System is susceptible to a SQL injection issue through the password2 parameter within the func.php file. This allows for potential unauthorized database access or modification.

Recommendations Sanitize or validate the password2 parameter in the func.php file to prevent SQL injection attacks.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-41527

Affected Products

Hospital Management System

References · 7

• https://osv.dev/vulnerability/CVE-2023-41527 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41527 · Security Note
• https://github.com/kishan0725/Hospital-Management-System · Note
• https://twitter.com/VulmonFeeds/status/1953600820827594834 · Twitter Post
• https://gist.github.com/celbahraoui/cbfa4a06cb3cce7222718f8c25519c98 · Note
• https://t.me/CVEtracker/29447 · Telegram Post
• https://twitter.com/CVEnew/status/1953515811210936637 · Twitter Post