HM
Product
Hospital Management System
by PHPGurukul · last CVE Feb 18, 2026
67
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 26Medium 25Low 1
Watch

Add Hospital Management System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-56214
9.8
0%
Aug 25
phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username parameter
Affected: 4.0
CVE-2025-56212
9.8
0%
Aug 25
phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter
Affected: 4.0
CVE-2025-8955
9.8
1%
Aug 14
PHPGurukul Hospital Management System edit-doctor.php sql injection
Affected: 4.0
CVE-2025-8954
9.8
0%
Aug 14
PHPGurukul Hospital Management System doctor-specilization.php sql injection
Affected: 4.0
CVE-2025-7604
9.8
0%
Jul 14
PHPGurukul Hospital Management System user-login.php sql injection
Affected: 4.0
CVE-2025-7176
9.8
1%
Jul 8
PHPGurukul Hospital Management System view-medhistory.php sql injection
Affected: 1.0
CVE-2024-51360
9.8
1%
May 23
An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute arbitrary code via the hms/doctor/edit-profile.php file
Affected: 4.0
CVE-2020-26629
9.8
1%
Jan 10
A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker to upload any file to the…
Affected: 4.0
CVE-2024-0364
9.8
1%
Jan 10
A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0
Affected: 1.0
CVE-2024-0363
9.8
1%
Jan 10
A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0
Affected: 1.0
CVE-2024-0362
9.8
1%
Jan 10
A vulnerability classified as critical was found in PHPGurukul Hospital Management System 1.0
Affected: 1.0
CVE-2024-0361
9.8
1%
Jan 10
A vulnerability classified as critical has been found in PHPGurukul Hospital Management System 1.0
Affected: 1.0
CVE-2024-0360
9.8
1%
Jan 10
A vulnerability was found in PHPGurukul Hospital Management System 1.0
Affected: 1.0
CVE-2023-31498
9.8
2%
May 11
A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to execute arbitrary code and access sensitive information via…
Affected: 4.0
CVE-2022-24263
9.8
8%
Jan 31
Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter
Affected: 4.0
CVE-2025-70064
8.8
1%
Feb 18
PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability
Affected: 4.0
CVE-2026-1550
8.8
0%
Jan 28
PHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorization
Affected: 1.0
CVE-2025-6570
8.8
0%
Jun 24
PHPGurukul Hospital Management System search.php sql injection
Affected: 4.0
CVE-2022-46499
8.8
1%
Mar 7
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php
Affected: 1.0
CVE-2021-35387
8.8
1%
Oct 28
Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php
Affected: 4.0
CVE-2020-35745
8.8
2%
Jan 7
PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change…
Affected: 4.0
CVE-2020-5192
8.8
24%
Jan 6
PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not validating user input, and allow for…
Affected: 4.0
CVE-2025-56216
8.5
0%
Aug 25
phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter
Affected: 4.0
CVE-2022-46497
8.1
0%
Mar 7
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_doc_view_single_patien.php
Affected: 1.0
CVE-2022-24226
7.5
2%
Feb 15
Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php
Affected: 4.0
CVE-2022-24646
7.5
2%
Feb 10
Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/contact.php via the txtMsg parameters
Affected: 4.0
CVE-2020-22176
7.5
2%
Jun 22
PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas
Affected: 4.0
CVE-2020-22175
7.5
2%
Jun 22
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsreports.php
Affected: 4.0
CVE-2020-22174
7.5
2%
Jun 22
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php
Affected: 4.0
CVE-2020-22173
7.5
2%
Jun 22
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php
Affected: 4.0
CVE-2020-22172
7.5
2%
Jun 22
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php
Affected: 4.0
CVE-2020-22171
7.5
2%
Jun 22
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\registration.php
Affected: 4.0
CVE-2020-22170
7.5
2%
Jun 22
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php
Affected: 4.0
CVE-2020-22169
7.5
2%
Jun 22
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\appointment-history.php
Affected: 4.0
CVE-2020-22168
7.5
2%
Jun 22
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\change-emaild.php
Affected: 4.0
CVE-2020-22166
7.5
2%
Jun 22
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\forgot-password.php
Affected: 4.0
CVE-2020-22165
7.5
6%
Jun 22
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php
Affected: 4.0
CVE-2020-22164
7.5
2%
Jun 22
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_availability.php
Affected: 4.0
CVE-2026-2179
7.2
0%
Feb 8
PHPGurukul Hospital Management System manage-users.php sql injection
Affected: 4.0
CVE-2026-2134
7.2
0%
Feb 8
PHPGurukul Hospital Management System manage-doctors.php sql injection
Affected: 4.0
CVE-2023-7172
7.2
1%
Dec 30
A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0
Affected: 1.0
CVE-2025-70062
6.5
0%
Feb 18
PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the 'Add Doctor' module
Affected: 4.0
CVE-2025-70063
6.5
0%
Feb 18
The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference (IDOR) vulnerability
Affected: 4.0
CVE-2025-56215
6.5
0%
Aug 25
phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter
Affected: 4.0
CVE-2020-26628
6.1
1%
Jan 10
A Cross-Site Scripting (XSS) vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious…
Affected: 4.0
CVE-2024-0286
6.1
1%
Jan 7
A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0
Affected: 1.0
CVE-2021-39411
6.1
1%
Nov 5
Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the (1) searchdata parameter in (a) doctor/search.php and (b)…
Affected: 4.0
CVE-2020-5193
6.1
1%
Jan 14
PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter
Affected: 4.0
CVE-2020-5191
6.1
6%
Jan 6
PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities
Affected: 4.0
CVE-2024-46239
5.9
0%
Oct 21
Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in…
Affected: 4.0
Page 1 of 2 · 67 total