PT-2025-47337 · Unknown · Hospital Management System Version 4

Published 2025-11-18 · Updated 2025-11-19 · CVE-2025-63512

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Hospital Management System version 4

Description The Hospital Management System version 4 is susceptible to a SQL Injection issue within the admin-panel1.php file, specifically in the doctor deletion functionality. The application does not adequately sanitize or parameterize the demail parameter, leading to its direct inclusion in a dynamic SQL query. This allows for potential manipulation of the database.

Recommendations Apply proper input sanitization and parameterized queries to the demail parameter in the doctor deletion logic within the admin-panel1.php file.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-63512

Affected Products

Hospital Management System Version 4

References · 6

• 🔥 https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospital_Management_System_SQL2.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-63512 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63512 · Security Note
• https://twitter.com/CVEnew/status/1991066227687760145 · Twitter Post
• https://t.me/CVEtracker/37649 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1990864252232516043 · Twitter Post