CVE-2023-41531: SQL Injection
Published Aug 7, 2025
·Updated
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters.
Affected Software
2 affected components
Hospital Management System Hospital Management System
kishan0725 Hospital Management System=4.0
Event History
Aug 7, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-41531?
CVE-2023-41531 is considered a critical vulnerability due to the potential for unauthorized data access through SQL injection.
2
How can I fix CVE-2023-41531?
To fix CVE-2023-41531, sanitize and validate user inputs in the func3.php file, particularly the username1 and password2 parameters.
3
What types of attacks can CVE-2023-41531 facilitate?
CVE-2023-41531 can facilitate SQL injection attacks, allowing attackers to manipulate database queries and gain unauthorized access to sensitive data.
4
Which software is affected by CVE-2023-41531?
CVE-2023-41531 affects the Hospital Management System v4.
5
How does CVE-2023-41531 impact data integrity?
CVE-2023-41531 can compromise data integrity by allowing attackers to alter or delete records in the database through SQL injection.