CVE-2020-22169: SQL Injection

Published Jun 22, 2021

Updated

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\appointment-history.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

Affected Software

2 affected components

Phpgurukul Hospital Management System in PHP=4.0

Phpgurukul Hospital Management System=4.0

Event History

Jun 22, 2021

CVE Published

via MITRE·02:10 PM

Data Sourced

via MITRE·02:10 PM

Description

Frequently Asked Questions

What is CVE-2020-22169?

CVE-2020-22169 is a SQL injection vulnerability in PHPGurukul Hospital Management System in PHP v4.0.

How can the SQL injection vulnerability in \hms\appointment-history.php be exploited?

Remote unauthenticated users can exploit the SQL injection vulnerability in \hms\appointment-history.php to obtain database sensitive information.

What is the severity of CVE-2020-22169?

CVE-2020-22169 has a severity score of 7.5, which is categorized as high.

What software is affected by CVE-2020-22169?

PHPGurukul Hospital Management System in PHP v4.0 is affected by CVE-2020-22169.

Is there a fix available for CVE-2020-22169?

There is no fix available at the moment. It is recommended to update to a patched version or apply any recommended security measures.