PT-2025-32301 · Unknown · Hospital Management System

Published 2025-08-07 · Updated 2025-08-07 · CVE-2023-41532

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hospital Management System version 4

Description The Hospital Management System is susceptible to a SQL injection due to the doctor contact parameter in the doctorsearch.php file.

Recommendations As a temporary workaround, consider restricting access to the doctorsearch.php file to minimize the risk of exploitation. Sanitize the doctor contact parameter before using it in any SQL queries.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-41532

Affected Products

Hospital Management System

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-41532 · Security Note
• https://osv.dev/vulnerability/CVE-2023-41532 · Vendor Advisory
• https://github.com/kishan0725/Hospital-Management-System · Note
• https://t.me/CVEtracker/29452 · Telegram Post
• https://gist.github.com/celbahraoui/9972727c6770cd63386ebbe07a9c1454 · Note
• https://twitter.com/CVEnew/status/1953522765954224306 · Twitter Post