CVE-2020-22164: SQL Injection

Published Jun 22, 2021

Updated

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\checkavailability.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

Affected Software

2 affected components

Phpgurukul Hospital Management System in PHP=4.0

Phpgurukul Hospital Management System=4.0

Event History

Jun 22, 2021

CVE Published

via MITRE·02:15 PM

Data Sourced

via MITRE·02:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2020-22164?

The severity of CVE-2020-22164 is high with a CVSS score of 7.5.

How does CVE-2020-22164 affect PHPGurukul Hospital Management System in PHP?

CVE-2020-22164 affects PHPGurukul Hospital Management System in PHP version 4.0 specifically, and it is vulnerable to a SQL injection attack.

What can remote unauthenticated users do with CVE-2020-22164?

Remote unauthenticated users can exploit CVE-2020-22164 to obtain sensitive information from the system's database.

Is CVE-2020-22164 publicly disclosed?

Yes, CVE-2020-22164 has been publicly disclosed and a reference link is available.

How can I fix the SQL injection vulnerability in PHPGurukul Hospital Management System?

To fix the SQL injection vulnerability in PHPGurukul Hospital Management System, you should update the system to a version that has addressed the vulnerability and sanitize user inputs to prevent SQL injection attacks.