CVE-2025-8955: PHPGurukul Hospital Management System edit-doctor.php sql injection
A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8955?
CVE-2025-8955 is considered a high severity vulnerability due to its potential for remote SQL injection.
What is affected by CVE-2025-8955?
CVE-2025-8955 affects the PHPGurukul Hospital Management System, specifically the /admin/edit-doctor.php file.
How do I fix CVE-2025-8955?
To fix CVE-2025-8955, sanitize and validate user input to prevent SQL injection in the affected script.
Can CVE-2025-8955 be exploited remotely?
Yes, CVE-2025-8955 can be exploited remotely, allowing attackers to manipulate SQL queries.
What kind of attack does CVE-2025-8955 facilitate?
CVE-2025-8955 facilitates SQL injection attacks, which can lead to unauthorized access to the database.