HM
Product
Hospital Management System
69
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 26Medium 27Low 1
Watch
Add Hospital Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-70064 | 8.8 | Feb 18 | PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability Affected: 4.0 |
| CVE-2026-1550 | 8.8 | Jan 28 | PHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorization Affected: 1.0 |
| CVE-2025-6570 | 8.8 | Jun 24 | PHPGurukul Hospital Management System search.php sql injection Affected: 4.0 |
| CVE-2022-46499 | 8.8 | Mar 7 | Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php Affected: 1.0 |
| CVE-2021-35387 | 8.8 | Oct 28 | Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php Affected: 4.0 |
| CVE-2020-35745 | 8.8 | Jan 7 | PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change… Affected: 4.0 |
| CVE-2020-5192 | 8.8 | Jan 6 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not validating user input, and allow for… Affected: 4.0 |
| CVE-2025-56216 | 8.5 | Aug 25 | phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter Affected: 4.0 |
| CVE-2022-46497 | 8.1 | Mar 7 | Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_doc_view_single_patien.php Affected: 1.0 |
| CVE-2022-24226 | 7.5 | Feb 15 | Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php Affected: 4.0 |
| CVE-2022-24646 | 7.5 | Feb 10 | Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/contact.php via the txtMsg parameters Affected: 4.0 |
| CVE-2020-22176 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas Affected: 4.0 |
| CVE-2020-22175 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsreports.php Affected: 4.0 |
| CVE-2020-22174 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php Affected: 4.0 |
| CVE-2020-22173 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php Affected: 4.0 |
| CVE-2020-22172 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php Affected: 4.0 |
| CVE-2020-22171 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\registration.php Affected: 4.0 |
| CVE-2020-22170 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php Affected: 4.0 |
| CVE-2020-22169 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\appointment-history.php Affected: 4.0 |
| CVE-2020-22168 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\change-emaild.php Affected: 4.0 |
| CVE-2020-22166 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\forgot-password.php Affected: 4.0 |
| CVE-2020-22165 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php Affected: 4.0 |
| CVE-2020-22164 | 7.5 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_availability.php Affected: 4.0 |
| CVE-2026-2179 | 7.2 | Feb 8 | PHPGurukul Hospital Management System manage-users.php sql injection Affected: 4.0 |
| CVE-2026-2134 | 7.2 | Feb 8 | PHPGurukul Hospital Management System manage-doctors.php sql injection Affected: 4.0 |
| CVE-2023-7172 | 7.2 | Dec 30 | A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0 Affected: 1.0 |
Showing 26