CVE-2025-6406: Campcodes Online Hospital Management System forgot-password.php sql injection
A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/forgot-password.php. The manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6406?
CVE-2025-6406 is classified as a critical vulnerability.
Which file is affected by CVE-2025-6406?
CVE-2025-6406 affects the /hms/forgot-password.php file in Campcodes Online Hospital Management System 1.0.
What type of vulnerability is CVE-2025-6406?
CVE-2025-6406 is an SQL injection vulnerability.
How can I fix CVE-2025-6406?
To fix CVE-2025-6406, validate and sanitize all inputs for the fullname argument to prevent SQL injection.
What systems are affected by CVE-2025-6406?
CVE-2025-6406 impacts Campcodes Online Hospital Management System version 1.0.