| Title | https://github.com/kishan0725/Hospital-Management-System Hospital-Management-System 1.0 SQL Injection |
|---|
| Description | Hospital Management System using MySQL, Php and Bootstrap
Video Demo : Hospital Management System - Youtube
Live Demo : Hospital Management System - 000webhost by Kishan
This vulnerability doesn't require authentication; you can exploit it just by crafting a packet.
Accept user-supplied parameters and directly concatenate them into the SQL execution statement, which directly leads to SQL injection
https://uvxbywu62qm.feishu.cn/wiki/NKztwPKs3i07urk5hARcG6venZ7?from=from_copylink |
|---|
| Source | ⚠️ https://uvxbywu62qm.feishu.cn/wiki/NKztwPKs3i07urk5hARcG6venZ7?from=from_copylink |
|---|
| User | hubdk01 (UID 99481) |
|---|
| Submission | 07/02/2026 23:18 (2 months ago) |
|---|
| Moderation | 08/31/2026 12:28 (2 months later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 397291 [kishan0725 Hospital-Management-System 1.0 /search.php Contact sql injection] |
|---|
| Points | 20 |
|---|