https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-63719.htmlhttps://patchthecve.com/cve/CVE-2025-63719.htmlWed, 17 Jun 2026 09:53:26 +0000HIGH 7.3: Campcodes Online Hospital Management System 1.0 is vulnerable to SQL Injection in /admin/index.php via the parameter username.https://patchthecve.com/cve/CVE-2025-9754.htmlhttps://patchthecve.com/cve/CVE-2025-9754.htmlWed, 17 Jun 2026 10:09:41 +0000LOW 3.5: A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotelhttps://patchthecve.com/cve/CVE-2025-9753.htmlhttps://patchthecve.com/cve/CVE-2025-9753.htmlWed, 17 Jun 2026 10:09:41 +0000LOW 2.4: A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected element is an unknown function of the file /admin/patient-search.php of the component Patient Search Module. Performing manipulation of the argument Search by Name Mobile No results in cross site scripting.https://patchthecve.com/cve/CVE-2025-6408.htmlhttps://patchthecve.com/cve/CVE-2025-6408.htmlWed, 17 Jun 2026 10:01:49 +0000HIGH 7.3: A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit https://patchthecve.com/cve/CVE-2025-6407.htmlhttps://patchthecve.com/cve/CVE-2025-6407.htmlWed, 17 Jun 2026 10:01:49 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /user-login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit hashttps://patchthecve.com/cve/CVE-2025-6406.htmlhttps://patchthecve.com/cve/CVE-2025-6406.htmlWed, 17 Jun 2026 10:01:49 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/forgot-password.php. The manipulation of the argument fullname leads to sql injection. The attack may be launchehttps://patchthecve.com/cve/CVE-2025-5365.htmlhttps://patchthecve.com/cve/CVE-2025-5365.htmlWed, 17 Jun 2026 09:47:46 +0000HIGH 7.3: A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. Thhttps://patchthecve.com/cve/CVE-2025-5364.htmlhttps://patchthecve.com/cve/CVE-2025-5364.htmlWed, 17 Jun 2026 09:47:46 +0000HIGH 7.3: A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /doctor/add-patient.php. The manipulation of the argument patname leads to sql injection. The attack may be launched remotely. Thehttps://patchthecve.com/cve/CVE-2025-5363.htmlhttps://patchthecve.com/cve/CVE-2025-5363.htmlWed, 17 Jun 2026 09:47:46 +0000HIGH 7.3: A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /doctor/index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotelhttps://patchthecve.com/cve/CVE-2025-5362.htmlhttps://patchthecve.com/cve/CVE-2025-5362.htmlWed, 17 Jun 2026 09:47:45 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. It is possible to launch the attahttps://patchthecve.com/cve/CVE-2025-5361.htmlhttps://patchthecve.com/cve/CVE-2025-5361.htmlWed, 17 Jun 2026 09:47:45 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. This issue affects some unknown processing of the file /contact.php. The manipulation of the argument fullname leads to sql injection. The attack may be initiated remotely. The explohttps://patchthecve.com/cve/CVE-2025-5360.htmlhttps://patchthecve.com/cve/CVE-2025-5360.htmlWed, 17 Jun 2026 09:47:45 +0000HIGH 7.3: A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /book-appointment.php. The manipulation of the argument doctor leads to sql injection. The attack can be initiated remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2025-5359.htmlhttps://patchthecve.com/cve/CVE-2025-5359.htmlWed, 17 Jun 2026 09:47:45 +0000HIGH 7.3: A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-5298.htmlhttps://patchthecve.com/cve/CVE-2025-5298.htmlWed, 17 Jun 2026 09:47:38 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the ahttps://patchthecve.com/cve/CVE-2025-5246.htmlhttps://patchthecve.com/cve/CVE-2025-5246.htmlWed, 17 Jun 2026 09:47:32 +0000HIGH 7.3: A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /hms/admin/query-details.php. The manipulation of the argument adminremark leads to sql injection. The attack can be initiated remotely. The exploihttps://patchthecve.com/cve/CVE-2025-5229.htmlhttps://patchthecve.com/cve/CVE-2025-5229.htmlWed, 17 Jun 2026 09:47:30 +0000HIGH 7.3: A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/view-patient.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. https://patchthecve.com/cve/CVE-2025-5224.htmlhttps://patchthecve.com/cve/CVE-2025-5224.htmlWed, 17 Jun 2026 09:47:29 +0000HIGH 7.3: A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/add-doctor.php. The manipulation of the argument Doctorspecialization leads to sql injection. It is possible to launch the attack remotely. Thehttps://patchthecve.com/cve/CVE-2025-5208.htmlhttps://patchthecve.com/cve/CVE-2025-5208.htmlWed, 17 Jun 2026 09:47:27 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. This affects an unknown part of the file /admin/check_availability.php. The manipulation of the argument emailid leads to sql injection. It is possible to initiate the attack remotel