First published: Mon Jan 06 2020(Updated: )
PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not validating user input, and allow for the application's database and information to be fully compromised.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
PHPGurukul Hospital Management System in PHP | =4.0 | |
PHPGURUKUL Hospital Management System | =4.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-5192 refers to multiple SQL injection vulnerabilities in PHPGurukul Hospital Management System in PHP v4.0.
CVE-2020-5192 has a severity rating of 8.8 (high).
CVE-2020-5192 allows for multiple SQL injection vulnerabilities in PHPGurukul Hospital Management System v4.0.
You can find more information about CVE-2020-5192 at the following references: [link 1](https://phpgurukul.com/hospital-management-system-in-php/) and [link 2](https://www.exploit-db.com/exploits/47840).
To fix the SQL injection vulnerabilities in PHPGurukul Hospital Management System v4.0, it is recommended to validate and sanitize user input in multiple pages and parameters.