CVE-2025-63512: SQL Injection
kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL query.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-63512?
CVE-2025-63512 is a critical vulnerability due to its potential for SQL Injection, allowing attackers to manipulate the database.
How do I fix CVE-2025-63512?
To fix CVE-2025-63512, sanitize and parameterize all user inputs, particularly the demail parameter in the admin-panel1.php file.
What version of kishan0725 Hospital Management System is affected by CVE-2025-63512?
CVE-2025-63512 affects version 4.0 of the kishan0725 Hospital Management System.
What type of vulnerability is CVE-2025-63512?
CVE-2025-63512 is categorized as an SQL Injection vulnerability.
Where does CVE-2025-63512 occur in the application?
CVE-2025-63512 occurs in the deleting doctor logic within admin-panel1.php.