CVE-2025-5365: Campcodes Online Hospital Management System patient-search.php sql injection
A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5365?
CVE-2025-5365 has been classified as a critical severity vulnerability.
What is CVE-2025-5365 about?
CVE-2025-5365 describes a SQL injection vulnerability in Campcodes Online Hospital Management System affecting the /admin/patient-search.php file.
How does the CVE-2025-5365 vulnerability occur?
The vulnerability occurs due to improper handling of the searchdata argument, allowing attackers to manipulate SQL queries.
How can I fix CVE-2025-5365?
Fixing CVE-2025-5365 typically involves sanitizing and validating user inputs to prevent SQL injection.
Which software is affected by CVE-2025-5365?
CVE-2025-5365 affects the Campcodes Online Hospital Management System 1.0.