| Title | PHPGurukul Hospital Management System 4.0 SQL Injection |
|---|
| Description | A vulnerability was found in PHPGurukul Hospital Management System (HMS) v4.0. It has been declared as critical. This vulnerability affects the code of the file /hms/admin/manage-doctors.php. The manipulation of the argument id (via the del parameter) leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. |
|---|
| Source | ⚠️ https://github.com/Shaon-Xis/PHPGurukul-HMS-SQL-Injection |
|---|
| User | yan1451 (UID 94854) |
|---|
| Submission | 01/27/2026 07:30 (6 months ago) |
|---|
| Moderation | 02/06/2026 21:57 (11 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 344769 [PHPGurukul Hospital Management System 4.0 manage-doctors.php ID sql injection] |
|---|
| Points | 19 |
|---|