{"id":7078,"date":"2025-06-20T08:48:41","date_gmt":"2025-06-20T08:48:41","guid":{"rendered":"http:\/\/localhost\/?p=7078"},"modified":"2025-06-20T08:48:41","modified_gmt":"2025-06-20T08:48:41","slug":"ponaravindb-hospital-management-system-func3php-sql-injection","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7078","title":{"rendered":"ponaravindb Hospital Management System func3.php sql injection"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nponaravindb Hospital Management System func3.php sql injection<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-20T12:00:19.885Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nponaravindb<\/td>\n<\/tr>\n
Product<\/th>\nHospital Management System<\/td>\n<\/tr>\n
Version<\/th>\n1.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n6.9 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:N\/UI:N\/VC:L\/VI:L\/VA:L\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA SQL injection vulnerability in the Hospital Management System allows remote attackers to inject malicious SQL code via the username1 argument in func3.php. This could lead to unauthorized data access or modification.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nponaravindb<\/td>\n<\/tr>\n
Product<\/th>\nHospital Management System<\/td>\n<\/tr>\n
Affected Version<\/th>\n1.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n