CVE-2025-5604: Campcodes Hospital Management System user-login.php sql injection
A vulnerability was found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5604?
CVE-2025-5604 is classified as a critical vulnerability affecting Campcodes Hospital Management System.
How does CVE-2025-5604 affect the system?
CVE-2025-5604 allows for SQL injection through the manipulation of the Username argument in the /user-login.php file.
Can CVE-2025-5604 be exploited remotely?
Yes, CVE-2025-5604 can be exploited remotely by attackers.
What versions of Campcodes Hospital Management System are affected by CVE-2025-5604?
CVE-2025-5604 affects version 1.0 of Campcodes Hospital Management System.
How do I fix CVE-2025-5604?
To fix CVE-2025-5604, it is recommended to implement prepared statements or parameterized queries to prevent SQL injection.