EUVD-2025-16903CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Lifecycle Timeline
4Description
A vulnerability has been found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument full_name/username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Analysis
Critical SQL injection vulnerability in Campcodes Hospital Management System version 1.0, affecting the /registration.php endpoint's full_name and username parameters. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary SQL queries, potentially leading to unauthorized data access, modification, or deletion of sensitive healthcare information. The vulnerability has been publicly disclosed with proof-of-concept code available, and exploitation requires no special privileges or user interaction.
Technical Context
The vulnerability stems from improper input validation and parameterized query failures in PHP code handling user registration data. The affected component (/registration.php) fails to sanitize user-supplied input in the full_name and username parameters before incorporating them into SQL queries, directly violating CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component). The root cause is the absence of prepared statements or proper escaping mechanisms. CPE: cpe:2.3:a:campcodes:hospital_management_system:1.0:*:*:*:*:*:*:* indicates the specific affected product and version. This is a classic second-order injection scenario where user input flows directly from the HTTP request into database query construction without intermediate sanitization.
Affected Products
Campcodes Hospital Management System (1.0)
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today