CVE-2025-69942: SQL Injection

Published Jul 29, 2026

Updated

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1.

Affected Software

1 affected component

Hospital Management System=4.0

Jul 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·10:16 PM

DescriptionSeverityWeakness

The severity of CVE-2025-69942 is critical with a score of 9.8 according to the CVSS 3.1 metrics.

To fix CVE-2025-69942, you should implement proper input validation and prepared statements to prevent SQL injection in the specified endpoint.

CVE-2025-69942 affects version 4.0 of the Hospital Management System.

CVE-2025-69942 is classified as a SQL Injection vulnerability.

CVE-2025-69942 is located in the /hms/doctor/view-patient.php?viewid=1 file of the Hospital Management System.