CVE-2025-5229: Campcodes Online Hospital Management System view-patient.php sql injection
A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/view-patient.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5229?
The severity of CVE-2025-5229 is rated as critical.
How does CVE-2025-5229 affect the Campcodes Online Hospital Management System?
CVE-2025-5229 affects the functionality of the file /admin/view-patient.php, allowing for SQL injection via the argument viewid.
What are the potential impacts of exploiting CVE-2025-5229?
Exploiting CVE-2025-5229 can lead to unauthorized access to sensitive patient data through SQL injection.
How can I fix CVE-2025-5229 in Campcodes Online Hospital Management System?
To fix CVE-2025-5229, sanitize user inputs and implement prepared statements to prevent SQL injection.
Is CVE-2025-5229 publicly known?
Yes, CVE-2025-5229 is a publicly known vulnerability affecting the Campcodes Online Hospital Management System.