CVE-2025-4739: projectworlds Hospital Database Management System medicines_info.php sql injection
Published May 16, 2025
·Updated
A vulnerability was found in projectworlds Hospital Database Management System 1.0. It has been classified as critical. This affects an unknown part of the file /medicinesinfo.php. The manipulation of the argument MedID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Projectworlds Hospital Database Management System
Projectworlds Hospital Database Management System=1.0
Event History
May 16, 2025
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-4739?
CVE-2025-4739 has been classified as critical.
2
What kind of vulnerability is CVE-2025-4739?
CVE-2025-4739 is an SQL injection vulnerability found in the medicines_info.php file.
3
How do I fix CVE-2025-4739?
To fix CVE-2025-4739, sanitize and validate user inputs to prevent SQL injection.
4
Which software is affected by CVE-2025-4739?
CVE-2025-4739 affects Projectworlds Hospital Database Management System 1.0.
5
What is the impact of exploiting CVE-2025-4739?
Exploiting CVE-2025-4739 can allow an attacker to execute arbitrary SQL commands in the database.