CVE-2025-6767: sfturing hosp_order DoctorServiceImpl.java findDoctorByCondition sql injection
A vulnerability was found in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. It has been rated as critical. This issue affects the function findDoctorByCondition of the file DoctorServiceImpl.java. The manipulation of the argument hospitalName leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6767?
CVE-2025-6767 has been rated as critical.
How do I fix CVE-2025-6767?
To fix CVE-2025-6767, update the sfturing hosp_order software to a version later than 627f426331da8086ce8fff2017d65b1ddef384f8.
What effect does CVE-2025-6767 have on my system?
CVE-2025-6767 allows for SQL injection via the findDoctorByCondition function, which can compromise the database integrity.
Which software is affected by CVE-2025-6767?
CVE-2025-6767 affects the sfturing hosp_order software up to version 627f426331da8086ce8fff2017d65b1ddef384f8.
What component of sfturing hosp_order is vulnerable in CVE-2025-6767?
The vulnerable component in CVE-2025-6767 is the findDoctorByCondition function in the DoctorServiceImpl.java file.