PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-69944 kishan0725 CVE debrief

A SQL Injection vulnerability exists in the view-medhistory.php endpoint of the kishan0725 Hospital Management System 4.0 via the viewid parameter. This issue has a CVSS score of 7.3 and is classified as HIGH severity. The vulnerability allows attackers to inject malicious SQL code, potentially leading to unauthorized access and data tampering. Defenders should assess exposure and prioritize verification and mitigation. The CVE record and NVD detail page provide information on the vulnerability, including its CVSS score and vector.

Vendor
kishan0725
Product
Hospital Management System 4.0
CVSS
HIGH 7.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-29
Original CVE updated
2026-10-12
Advisory published
2026-07-29
Advisory updated
2026-10-12

Who should care

Defenders responsible for the Hospital Management System 4.0 should assess exposure and prioritize verification and mitigation of this vulnerability.

Why it matters

This SQL Injection vulnerability in the Hospital Management System 4.0 requires verification and potential mitigation to prevent unauthorized access and data tampering.

  • Potential unauthorized access to sensitive data
  • Possible disruption of hospital operations
  • Need for verification of system vulnerability
  • Potential for data tampering or injection

Technical summary

The view-medhistory.php endpoint of the kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection via the viewid parameter. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. This vulnerability can be exploited by attackers to inject malicious SQL code, potentially leading to unauthorized access and data tampering. Defenders should prioritize verifying the presence of this vulnerability in their systems and applying patches or mitigations as available.

Defensive priority

Defenders should prioritize verifying the presence of this vulnerability in their systems and applying patches or mitigations as available.

Recommended defensive actions

  • Verify the presence of the vulnerability in the Hospital Management System 4.0
  • Apply patches or mitigations as available
  • Monitor for potential exploitation attempts

Evidence notes

The CVE record and NVD detail page provide information on the vulnerability, including its CVSS score and vector. A source reference is also available on GitHub.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-69944 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-69944

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-69944 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-69944

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/hospitalmanagementsystemproject/20250811-hospital-management-system-view-medhistory.php-viewid-sqli/20250811-hospital-management-system-view-medhistory.php-viewid-sqli.md

    [email protected]

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.