CVE-2025-7604: PHPGurukul Hospital Management System user-login.php sql injection
A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7604?
CVE-2025-7604 is classified as a critical vulnerability.
What component of the PHPGurukul Hospital Management System is affected by CVE-2025-7604?
CVE-2025-7604 affects the /user-login.php file's functionality within the PHPGurukul Hospital Management System.
What type of vulnerability is CVE-2025-7604?
CVE-2025-7604 is a SQL injection vulnerability caused by improper handling of the Username parameter.
How can I mitigate CVE-2025-7604?
To mitigate CVE-2025-7604, validate and sanitize user input for the Username parameter to prevent SQL injection.
Is there a patch available for CVE-2025-7604?
As of now, check with the vendor for any available patches or updates to fix CVE-2025-7604.