CVE-2025-5298: Campcodes Online Hospital Management System betweendates-detailsreports.php sql injection
A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5298?
CVE-2025-5298 is classified as a critical vulnerability.
How do I fix CVE-2025-5298?
To fix CVE-2025-5298, ensure that all input parameters in the /admin/betweendates-detailsreports.php file are appropriately sanitized to prevent SQL injection.
What systems are affected by CVE-2025-5298?
CVE-2025-5298 impacts Campcodes Online Hospital Management System version 1.0.
What type of vulnerability is CVE-2025-5298?
CVE-2025-5298 is identified as an SQL injection vulnerability.
Can CVE-2025-5298 lead to data breaches?
Yes, due to its critical nature, CVE-2025-5298 can potentially lead to unauthorized access to sensitive data.