https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-63514.htmlhttps://patchthecve.com/cve/CVE-2025-63514.htmlWed, 17 Jun 2026 09:53:12 +0000MEDIUM 6.1: kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the email parameter.https://patchthecve.com/cve/CVE-2025-63513.htmlhttps://patchthecve.com/cve/CVE-2025-63513.htmlWed, 17 Jun 2026 09:53:12 +0000MEDIUM 6.5: kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functionality.https://patchthecve.com/cve/CVE-2025-63512.htmlhttps://patchthecve.com/cve/CVE-2025-63512.htmlWed, 17 Jun 2026 09:53:12 +0000MEDIUM 6.5: kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL query.https://patchthecve.com/cve/CVE-2023-41532.htmlhttps://patchthecve.com/cve/CVE-2023-41532.htmlWed, 17 Jun 2026 06:22:20 +0000HIGH 8.8: Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact parameter in doctorsearch.php.https://patchthecve.com/cve/CVE-2023-41531.htmlhttps://patchthecve.com/cve/CVE-2023-41531.htmlWed, 17 Jun 2026 06:22:19 +0000HIGH 8.8: Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters.https://patchthecve.com/cve/CVE-2023-41530.htmlhttps://patchthecve.com/cve/CVE-2023-41530.htmlWed, 17 Jun 2026 06:22:19 +0000CRITICAL 9.8: Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php.https://patchthecve.com/cve/CVE-2023-41529.htmlhttps://patchthecve.com/cve/CVE-2023-41529.htmlWed, 17 Jun 2026 06:22:18 +0000MEDIUM 6.1: Hospital Management System v4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in func2.php via the fname and lname parameters.https://patchthecve.com/cve/CVE-2023-41528.htmlhttps://patchthecve.com/cve/CVE-2023-41528.htmlWed, 17 Jun 2026 06:22:18 +0000CRITICAL 9.8: Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters.https://patchthecve.com/cve/CVE-2023-41527.htmlhttps://patchthecve.com/cve/CVE-2023-41527.htmlWed, 17 Jun 2026 06:22:18 +0000CRITICAL 9.8: Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php.https://patchthecve.com/cve/CVE-2023-41526.htmlhttps://patchthecve.com/cve/CVE-2023-41526.htmlWed, 17 Jun 2026 06:22:17 +0000CRITICAL 9.8: Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters.https://patchthecve.com/cve/CVE-2023-41525.htmlhttps://patchthecve.com/cve/CVE-2023-41525.htmlWed, 17 Jun 2026 06:22:17 +0000CRITICAL 9.8: Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php.https://patchthecve.com/cve/CVE-2023-40992.htmlhttps://patchthecve.com/cve/CVE-2023-40992.htmlWed, 17 Jun 2026 06:20:05 +0000MEDIUM 6.5: Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter.https://patchthecve.com/cve/CVE-2023-43958.htmlhttps://patchthecve.com/cve/CVE-2023-43958.htmlWed, 17 Jun 2026 06:26:41 +0000CRITICAL 9.8: An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthenticated attacker to upload any file to the server and execute arbitrary code.https://patchthecve.com/cve/CVE-2024-45983.htmlhttps://patchthecve.com/cve/CVE-2024-45983.htmlWed, 17 Jun 2026 07:55:05 +0000MEDIUM 6.3: A Cross-Site Request Forgery (CSRF) vulnerability exists in kishan0725's Hospital Management System version 6.3.5. The vulnerability allows an attacker to craft a malicious HTML form that submits a request to delete a doctor record. By enticing an authenticated admin user to visit the specially craf