Hospital Management System

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:kishan0725:hospital_management_system:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

VendorKishan0725 (336482f5-9b04-55da-a591-68ed2250f978)
ProductHospital Management System (56361eec-f2fa-5fe1-93ec-919b991b01da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/kishan0725/hospital-management-system purl2cpe 2026-06-01 10:11:15.409532

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-63513 vulnerable 2026-06-08 07:39:17.636579 Details available
kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functionality.
Published: 2025-11-18T00:00:00.000Z
Updated: 2025-11-19T16:50:15.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63512 vulnerable 2026-06-08 07:39:17.635968 Details available
kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL query.
Published: 2025-11-18T00:00:00.000Z
Updated: 2025-11-18T17:11:03.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43958 vulnerable 2026-06-08 06:12:38.185829 Details available
An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthenticated attacker to upload any file to the server and execute arbitrary code.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T13:33:56.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41532 vulnerable 2026-06-08 06:11:06.158133 Details available
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact parameter in doctorsearch.php.
Published: 2025-08-07T00:00:00.000Z
Updated: 2025-08-07T19:18:32.327Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41531 vulnerable 2026-06-08 06:11:06.157845 Details available
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters.
Published: 2025-08-07T00:00:00.000Z
Updated: 2025-08-07T19:17:02.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41530 vulnerable 2026-06-08 06:11:06.157210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41529 vulnerable 2026-06-08 06:11:06.156920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41528 vulnerable 2026-06-08 06:11:06.156321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41527 vulnerable 2026-06-08 06:11:06.155296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41526 vulnerable 2026-06-08 06:11:06.154626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41525 vulnerable 2026-06-08 06:11:06.152616 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40992 vulnerable 2026-06-08 06:11:04.803569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.