CVE-2025-5359: Campcodes Online Hospital Management System appointment-history.php sql injection
Published May 30, 2025
·Updated
A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Campcodes Online Hospital Management System
Campcodes Online Hospital Management System=1.0
Event History
May 30, 2025
CVE Published
via MITRE·06:31 PM
Data Sourced
via MITRE·06:31 PM
DescriptionSeverityWeakness
Jan 12, 57458
Event
via FIRST·09:50 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-5359?
CVE-2025-5359 is classified as a critical vulnerability.
2
How does CVE-2025-5359 exploit the system?
CVE-2025-5359 exploits the system by allowing SQL injection through the manipulation of the ID argument.
3
Can CVE-2025-5359 be exploited remotely?
Yes, CVE-2025-5359 can be exploited remotely.
4
What software is affected by CVE-2025-5359?
CVE-2025-5359 affects Campcodes Online Hospital Management System version 1.0.
5
How do I fix CVE-2025-5359?
To fix CVE-2025-5359, ensure proper input validation and parameterized queries to mitigate SQL injection risks.