PT-2025-32297 · Unknown · Hospital Management System

Published 2025-08-07 · Updated 2025-08-07 · CVE-2023-41528

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hospital Management System version 4

Description The Hospital Management System is susceptible to multiple SQL injection flaws within the contact.php file. These flaws are triggered through the txtname, txtphone, and txtmail parameters.

Recommendations Apply input validation and sanitization to the txtname, txtphone, and txtmail parameters in the contact.php file.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-41528

Affected Products

Hospital Management System

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-41528 · Security Note
• https://osv.dev/vulnerability/CVE-2023-41528 · Vendor Advisory
• https://github.com/kishan0725/Hospital-Management-System · Note
• https://t.me/CVEtracker/29448 · Telegram Post
• https://twitter.com/CVEnew/status/1953515812095938830 · Twitter Post
• https://gist.github.com/celbahraoui/4f6168774ef31510e3bad5cdeccd131e · Note