HM
Product
Hospital Management System
67
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 26Medium 25Low 1
Watch
Add Hospital Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-56214 | 9.8 | Aug 25 | phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username parameter Affected: 4.0 |
| CVE-2025-56212 | 9.8 | Aug 25 | phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter Affected: 4.0 |
| CVE-2025-8955 | 9.8 | Aug 14 | PHPGurukul Hospital Management System edit-doctor.php sql injection Affected: 4.0 |
| CVE-2025-8954 | 9.8 | Aug 14 | PHPGurukul Hospital Management System doctor-specilization.php sql injection Affected: 4.0 |
| CVE-2025-7604 | 9.8 | Jul 14 | PHPGurukul Hospital Management System user-login.php sql injection Affected: 4.0 |
| CVE-2025-7176 | 9.8 | Jul 8 | PHPGurukul Hospital Management System view-medhistory.php sql injection Affected: 1.0 |
| CVE-2024-51360 | 9.8 | May 23 | An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute arbitrary code via the hms/doctor/edit-profile.php file Affected: 4.0 |
| CVE-2020-26629 | 9.8 | Jan 10 | A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker to upload any file to the… Affected: 4.0 |
| CVE-2024-0364 | 9.8 | Jan 10 | A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0 Affected: 1.0 |
| CVE-2024-0363 | 9.8 | Jan 10 | A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0 Affected: 1.0 |
| CVE-2024-0362 | 9.8 | Jan 10 | A vulnerability classified as critical was found in PHPGurukul Hospital Management System 1.0 Affected: 1.0 |
| CVE-2024-0361 | 9.8 | Jan 10 | A vulnerability classified as critical has been found in PHPGurukul Hospital Management System 1.0 Affected: 1.0 |
| CVE-2024-0360 | 9.8 | Jan 10 | A vulnerability was found in PHPGurukul Hospital Management System 1.0 Affected: 1.0 |
| CVE-2023-31498 | 9.8 | May 11 | A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to execute arbitrary code and access sensitive information via… Affected: 4.0 |
| CVE-2022-24263 | 9.8 | Jan 31 | Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter Affected: 4.0 |
| CVE-2025-70064 | 8.8 | Feb 18 | PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability Affected: 4.0 |
| CVE-2026-1550 | 8.8 | Jan 28 | PHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorization Affected: 1.0 |
| CVE-2025-6570 | 8.8 | Jun 24 | PHPGurukul Hospital Management System search.php sql injection Affected: 4.0 |
| CVE-2022-46499 | 8.8 | Mar 7 | Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php Affected: 1.0 |
| CVE-2021-35387 | 8.8 | Oct 28 | Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php Affected: 4.0 |
| CVE-2020-35745 | 8.8 | Jan 7 | PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change… Affected: 4.0 |
| CVE-2020-5192 | 8.8 | Jan 6 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not validating user input, and allow for… Affected: 4.0 |
| CVE-2025-56216 | 8.5 | Aug 25 | phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter Affected: 4.0 |
| CVE-2022-46497 | 8.1 | Mar 7 | Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_doc_view_single_patien.php Affected: 1.0 |
| CVE-2022-24226 | 7.5 | Feb 15 | Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php Affected: 4.0 |
| CVE-2022-24646 | 7.5 | Feb 10 | Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/contact.php via the txtMsg parameters Affected: 4.0 |
| CVE-2020-22176 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas Affected: 4.0 |
| CVE-2020-22175 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsreports.php Affected: 4.0 |
| CVE-2020-22174 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php Affected: 4.0 |
| CVE-2020-22173 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php Affected: 4.0 |
| CVE-2020-22172 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php Affected: 4.0 |
| CVE-2020-22171 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\registration.php Affected: 4.0 |
| CVE-2020-22170 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php Affected: 4.0 |
| CVE-2020-22169 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\appointment-history.php Affected: 4.0 |
| CVE-2020-22168 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\change-emaild.php Affected: 4.0 |
| CVE-2020-22166 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\forgot-password.php Affected: 4.0 |
| CVE-2020-22165 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php Affected: 4.0 |
| CVE-2020-22164 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_availability.php Affected: 4.0 |
| CVE-2026-2179 | 7.2 | Feb 8 | PHPGurukul Hospital Management System manage-users.php sql injection Affected: 4.0 |
| CVE-2026-2134 | 7.2 | Feb 8 | PHPGurukul Hospital Management System manage-doctors.php sql injection Affected: 4.0 |
| CVE-2023-7172 | 7.2 | Dec 30 | A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0 Affected: 1.0 |
| CVE-2025-70062 | 6.5 | Feb 18 | PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the 'Add Doctor' module Affected: 4.0 |
| CVE-2025-70063 | 6.5 | Feb 18 | The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference (IDOR) vulnerability Affected: 4.0 |
| CVE-2025-56215 | 6.5 | Aug 25 | phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter Affected: 4.0 |
| CVE-2020-26628 | 6.1 | Jan 10 | A Cross-Site Scripting (XSS) vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious… Affected: 4.0 |
| CVE-2024-0286 | 6.1 | Jan 7 | A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0 Affected: 1.0 |
| CVE-2021-39411 | 6.1 | Nov 5 | Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the (1) searchdata parameter in (a) doctor/search.php and (b)… Affected: 4.0 |
| CVE-2020-5193 | 6.1 | Jan 14 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter Affected: 4.0 |
| CVE-2020-5191 | 6.1 | Jan 6 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities Affected: 4.0 |
| CVE-2024-46239 | 5.9 | Oct 21 | Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in… Affected: 4.0 |
