hospital management system vulnerabilities and fixes

Recent CVEs affecting hospital management system, with upgrade or downgrade steps. 65 tracked.

Also searched as: hospitalmanagementsystem.

hospital management system has 65 tracked vulnerabilities, 10 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-02-18. Highest priority: CVE-2024-40502 (score 62/100).

• CVE-2025-9746 LOW 2.4 DOWNGRADE A vulnerability was detected in Campcodes Hospital Management System 1.0
• CVE-2025-11609 LOW 3.7 DOWNGRADE A flaw has been found in code-projects Hospital Management System 1.0
• CVE-2025-9770 HIGH 7.3 DOWNGRADE A weakness has been identified in Campcodes Hospital Management System 1.0
• CVE-2026-2179 MEDIUM 4.7 DOWNGRADE A vulnerability was determined in PHPGurukul Hospital Management System 4.0
• CVE-2026-2134 MEDIUM 4.7 DOWNGRADE A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0
• CVE-2026-1550 MEDIUM 6.3 DOWNGRADE A security flaw has been discovered in PHPGurukul Hospital Management System 1.0
• CVE-2025-8955 HIGH 7.3 DOWNGRADE A vulnerability has been found in PHPGurukul Hospital Management System 4.0
• CVE-2025-8954 HIGH 7.3 DOWNGRADE A vulnerability was identified in PHPGurukul Hospital Management System 4.0
• CVE-2025-7604 HIGH 7.3 DOWNGRADE A vulnerability was found in PHPGurukul Hospital Management System 4.0
• CVE-2025-7176 HIGH 7.3 DOWNGRADE A vulnerability was found in PHPGurukul Hospital Management System 1.0
• CVE-2025-70064 HIGH 8.8 DOWNGRADE PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability
• CVE-2025-70063 MEDIUM 6.5 DOWNGRADE The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object
• CVE-2025-70062 MEDIUM 6.5 DOWNGRADE PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the '
• CVE-2025-6613 LOW 3.5 DOWNGRADE A vulnerability classified as problematic was found in PHPGurukul Hospital Management System 4.0
• CVE-2025-6570 MEDIUM 6.3 DOWNGRADE A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 4.0
• CVE-2025-6339 HIGH 7.3 DOWNGRADE A vulnerability was found in ponaravindb Hospital Management System 1.0
• CVE-2025-63514 MEDIUM 6.1 MITIGATE kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the
• CVE-2025-63513 MEDIUM 6.5 DOWNGRADE kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the a
• CVE-2025-63512 MEDIUM 6.5 DOWNGRADE kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in
• CVE-2025-63497 HIGH 7.1 DOWNGRADE The patient prescription viewing functionality in his_doc_view_single_patient.php of rickxy Hospital Managemen
• CVE-2025-56216 HIGH 8.5 DOWNGRADE phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle par
• CVE-2025-56215 MEDIUM 6.5 DOWNGRADE phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle para
• CVE-2025-56214 CRITICAL 9.8 DOWNGRADE phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username paramet
• CVE-2025-56212 CRITICAL 9.8 DOWNGRADE phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname par
• CVE-2025-4933 MEDIUM 6.3 DOWNGRADE A vulnerability, which was classified as critical, was found in ponaravindb Hospital-Management-System 1.0
• CVE-2025-3206 MEDIUM 6.3 DOWNGRADE A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical
• CVE-2025-2664 MEDIUM 4.7 DOWNGRADE A vulnerability was found in CodeZips Hospital Management System 1.0 and classified as critical
• CVE-2025-29410 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in the component /contact.php of Hospital Management System v1.0 al
• CVE-2024-8944 HIGH 7.3 DOWNGRADE A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0
• CVE-2024-8569 HIGH 7.3 DOWNGRADE A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical
• CVE-2024-8368 HIGH 7.3 DOWNGRADE A vulnerability was found in code-projects Hospital Management System 1.0
• CVE-2024-56998 MEDIUM 4.2 DOWNGRADE PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /edit-profile.php via
• CVE-2024-56997 MEDIUM 4.2 DOWNGRADE PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /doctor/index.php via
• CVE-2024-56990 MEDIUM 4.5 DOWNGRADE PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /view-medhistory.php
• CVE-2024-51360 CRITICAL 9.8 DOWNGRADE An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute arbitrary code via the
• CVE-2024-46239 MEDIUM 5.9 DOWNGRADE Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docna
• CVE-2024-46238 MEDIUM 5.9 DOWNGRADE Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the
• CVE-2024-46237 MEDIUM 5.4 DOWNGRADE PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddr
• CVE-2024-45983 MEDIUM 6.3 DOWNGRADE A Cross-Site Request Forgery (CSRF) vulnerability exists in kishan0725's Hospital Management System version 6.
• CVE-2024-40502 CRITICAL 9.8 DOWNGRADE SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to
• CVE-2024-12983 LOW 2.4 DOWNGRADE A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0
• CVE-2024-12976 HIGH 7.3 DOWNGRADE A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0
• CVE-2024-12969 HIGH 7.3 DOWNGRADE A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System
• CVE-2024-12947 MEDIUM 6.3 DOWNGRADE A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical
• CVE-2024-11678 LOW 3.5 DOWNGRADE A vulnerability was found in CodeAstro Hospital Management System 1.0
• CVE-2024-11677 LOW 3.5 DOWNGRADE A vulnerability was found in CodeAstro Hospital Management System 1.0
• CVE-2024-11676 LOW 3.5 DOWNGRADE A vulnerability was found in CodeAstro Hospital Management System 1.0 and classified as problematic
• CVE-2024-11675 LOW 3.5 DOWNGRADE A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic
• CVE-2024-11674 MEDIUM 6.3 DOWNGRADE A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0
• CVE-2024-11102 LOW 3.5 DOWNGRADE A vulnerability was found in SourceCodester Hospital Management System 1.0
• CVE-2024-10807 LOW 2.4 DOWNGRADE A vulnerability was found in PHPGurukul Hospital Management System 4.0
• CVE-2024-10806 LOW 2.4 DOWNGRADE A vulnerability was found in PHPGurukul Hospital Management System 4.0
• CVE-2024-10350 MEDIUM 4.7 DOWNGRADE A vulnerability was found in code-projects Hospital Management System 1.0
• CVE-2024-10170 MEDIUM 6.3 DOWNGRADE A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System
• CVE-2024-10169 MEDIUM 6.3 DOWNGRADE A vulnerability classified as critical was found in code-projects Hospital Management System 1.0
• CVE-2023-43958 CRITICAL 9.8 DOWNGRADE An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital M
• CVE-2023-41532 HIGH 8.8 DOWNGRADE Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact p
• CVE-2023-41531 HIGH 8.8 DOWNGRADE Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php vi
• CVE-2023-41530 CRITICAL 9.8 DOWNGRADE Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact para
• CVE-2023-41529 MEDIUM 6.1 DOWNGRADE Hospital Management System v4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in
• CVE-2023-41528 CRITICAL 9.8 DOWNGRADE Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php
• CVE-2023-41527 CRITICAL 9.8 DOWNGRADE Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parame
• CVE-2023-41526 CRITICAL 9.8 DOWNGRADE Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php vi
• CVE-2023-41525 CRITICAL 9.8 DOWNGRADE Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact
• CVE-2023-40992 MEDIUM 6.5 DOWNGRADE Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php v

FAQ

How do I fix hospital management system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is hospital management system being exploited right now?

None of the tracked hospital management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which hospital management system CVE should I patch first?

CVE-2024-40502 currently ranks highest (62/100): SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to .

RSS feed for hospital management system · ← Back to latest CVEs