First published: Tue Jun 22 2021(Updated: )
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_availability.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
PHPGurukul Hospital Management System in PHP | =4.0 | |
PHPGURUKUL Hospital Management System | =4.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2020-22164 is high with a CVSS score of 7.5.
CVE-2020-22164 affects PHPGurukul Hospital Management System in PHP version 4.0 specifically, and it is vulnerable to a SQL injection attack.
Remote unauthenticated users can exploit CVE-2020-22164 to obtain sensitive information from the system's database.
Yes, CVE-2020-22164 has been publicly disclosed and a reference link is available.
To fix the SQL injection vulnerability in PHPGurukul Hospital Management System, you should update the system to a version that has addressed the vulnerability and sanitize user inputs to prevent SQL injection attacks.