CVE-2025-6408: Campcodes Online Hospital Management System search.php sql injection
A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6408?
CVE-2025-6408 is classified as a critical vulnerability.
How does CVE-2025-6408 impact the Campcodes Online Hospital Management System?
CVE-2025-6408 allows for SQL injection through the manipulation of the searchdata argument in /doctor/search.php.
Can CVE-2025-6408 be exploited remotely?
Yes, CVE-2025-6408 can be exploited remotely by attacking the vulnerable search data parameter.
What versions of the Campcodes Online Hospital Management System are affected by CVE-2025-6408?
CVE-2025-6408 affects version 1.0 of the Campcodes Online Hospital Management System.
What steps should be taken to mitigate CVE-2025-6408?
To mitigate CVE-2025-6408, sanitize input data in the /doctor/search.php file to prevent SQL injection.