Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:hospital_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductHospital Management System (0261ee04-0f79-5c4e-858c-99be45a52a88)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/itodaro/PHPGurukul_Hospital_Management_System4.0_cve purl2cpe 2026-06-01 10:12:14.282030

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2179 vulnerable 2026-06-08 07:55:16.677817 PHPGurukul Hospital Management System manage-users.php sql injection
MEDIUM (4.7)
A vulnerability was determined in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /admin/manage-users.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-02-08T19:32:07.604Z
Updated: 2026-02-23T09:47:56.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2134 vulnerable 2026-06-08 07:55:16.589000 PHPGurukul Hospital Management System manage-doctors.php sql injection
MEDIUM (4.7)
A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0. The affected element is an unknown function of the file /hms/admin/manage-doctors.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Published: 2026-02-08T04:02:07.685Z
Updated: 2026-02-23T09:37:51.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1550 vulnerable 2026-06-08 07:49:08.871934 PHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorization
MEDIUM (6.3)
A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/hospital/docappsystem/adminviews.py of the component Admin Dashboard Page. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2026-01-28T23:02:10.342Z
Updated: 2026-02-23T09:03:01.284Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8955 vulnerable 2026-06-08 07:45:21.506085 PHPGurukul Hospital Management System edit-doctor.php sql injection
HIGH (7.3)
A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-14T09:32:06.607Z
Updated: 2025-08-14T14:49:17.774Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8954 vulnerable 2026-06-08 07:45:21.504203 PHPGurukul Hospital Management System doctor-specilization.php sql injection
HIGH (7.3)
A vulnerability was identified in PHPGurukul Hospital Management System 4.0. This affects an unknown part of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-14T09:02:10.057Z
Updated: 2025-08-14T14:49:29.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7604 vulnerable 2026-06-08 07:45:17.756395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7176 vulnerable 2026-06-08 07:43:18.092548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6613 vulnerable 2026-06-08 07:43:15.686490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6570 vulnerable 2026-06-08 07:43:15.480669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5584 vulnerable 2026-06-08 07:37:25.213894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10807 vulnerable 2026-06-08 06:23:47.596969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10806 vulnerable 2026-06-08 06:23:47.595133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0364 vulnerable 2026-06-08 06:22:00.455342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0363 vulnerable 2026-06-08 06:22:00.454669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0362 vulnerable 2026-06-08 06:22:00.452042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0361 vulnerable 2026-06-08 06:22:00.451620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0360 vulnerable 2026-06-08 06:22:00.451147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0286 vulnerable 2026-06-08 06:22:00.243236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7173 vulnerable 2026-06-08 06:21:57.191292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7172 vulnerable 2026-06-08 06:21:57.189856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.