CVE-2025-69945: SQL Injection

Published Jul 29, 2026

Updated

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.

Affected Software

1 affected component

Hospital Management System=4.0

Jul 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·10:16 PM

DescriptionSeverityWeakness

CVE-2025-69945 has a severity rating of high with a CVSS score of 7.3.

CVE-2025-69945 is a SQL Injection vulnerability found in the Hospital Management System.

To fix CVE-2025-69945, sanitize and parameterize the SQL queries in the /doctor/edit-patient.php file.

CVE-2025-69945 affects version 4.0 of the Hospital Management System.

The vulnerability is located in the /doctor/edit-patient.php page handling the editid parameter.