PT-2025-32300 · Unknown · Hospital Management System

Published 2025-08-07 · Updated 2025-08-07 · CVE-2023-41531

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hospital Management System version 4

Description The Hospital Management System contains multiple SQL injection vulnerabilities in the func3.php file. These vulnerabilities are present through the username1 and password2 parameters.

Recommendations Apply input validation and sanitization to the username1 and password2 parameters in the func3.php file.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-41531

Affected Products

Hospital Management System

References · 8

• https://osv.dev/vulnerability/CVE-2023-41531 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41531 · Security Note
• https://github.com/kishan0725/Hospital-Management-System · Note
• https://twitter.com/VulmonFeeds/status/1953593142269145280 · Twitter Post
• https://t.me/cveNotify/131336 · Telegram Post
• https://twitter.com/CVEnew/status/1953522765052399801 · Twitter Post
• https://gist.github.com/celbahraoui/f3e2c9d9d015aa455949e3d3c4fdade6 · Note
• https://t.me/CVEtracker/29451 · Telegram Post