CVE-2025-5603: Campcodes Hospital Management System registration.php sql injection
A vulnerability has been found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument fullname/username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5603?
CVE-2025-5603 is classified as a critical severity vulnerability impacting the Campcodes Hospital Management System.
What type of vulnerability is CVE-2025-5603?
CVE-2025-5603 is an SQL injection vulnerability found in the /registration.php file.
How does CVE-2025-5603 affect the Campcodes Hospital Management System?
CVE-2025-5603 allows attackers to manipulate the full_name/username parameter leading to unauthorized database access.
How do I fix CVE-2025-5603?
To fix CVE-2025-5603, validate and sanitize all user inputs and employ prepared statements for database queries.
Is CVE-2025-5603 actively being exploited?
As of now, there have been reports of active exploitation targeting CVE-2025-5603 in the wild.