What is CVE-2025-69942?
An SQL Injection vulnerability was discovered in kishan0725 Hospital Management System 4.0 at the endpoint `/hms/doctor/view-patient.php?viewid=1`. This allows attackers to send unauthorized queries to the database. Prepared statements should be used for the `viewid` parameter to ensure security.
Azərbaycanca: kishan0725 Hospital Management System 4.0-da `/hms/doctor/view-patient.php?viewid=1` endpointində SQL Injection zəifliyi aşkar edilib. Bu, təcavüzkara verilənlər bazasına icazəsiz sorğular göndərməyə imkan verir. Təhlükəsizlik üçün `viewid` parametri üçün prepared statement-lərdən istifadə edilməlidir.
Related CVEs
link basis: same weakness class CWE-89; shared vendor: kishan0725
FAQ2
Which endpoint in kishan0725 Hospital Management System 4.0 has an SQL Injection vulnerability?
The SQL Injection vulnerability was discovered at the /hms/doctor/view-patient.php?viewid=1 endpoint.
What security measure is recommended to fix the CVE-2025-69942 vulnerability?
Prepared statements should be used for the viewid parameter to ensure security.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.