What is the CVSS score of CVE-2025-69943?

CVE-2025-69943 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Hospital Management System are affected by CVE-2025-69943?

Healthcare organizations using kishan0725 Hospital Management System 4.0 face potential patient data compromise due to a critical SQL injection vulnerability enabling unauthorized database access…

How to fix or mitigate CVE-2025-69943?

Within 24 hours, identify all instances of kishan0725 Hospital Management System 4.0 in production, development, or testing environments and document what sensitive data is accessible through those instances. Within 7 days, implement Web Application Firewall rules blocking SQL injection payloads targeting the 'doctor' and 'specilizationid' parameters in get_doctor.php, restrict network access to the application via firewall segmentation, and enable database activity monitoring to detect suspicious queries. Within 30 days, contact the kishan0725 project maintainers regarding patch timeline or plan migration to a vendor-supported hospital management system with active security maintenance.

Hospital Management System CVE-2025-69943

EUVD-2025-210541 CRITICAL

SQL Injection (CWE-89)

2026-07-29 mitre

GHSA-ghxv-gf56-x785

PHP SQLi N A

9.8

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

9.8 CRITICAL

Network-reachable script with unsanitized parameters gives AV:N/AC:L; NVD asserts PR:N/UI:N; SQLi over the DB yields full C:H/I:H/A:H, though PR:N depends on unverified public reachability.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 30, 2026 - 15:29 vuln.today

CVSS changed

Jul 30, 2026 - 15:22 NVD

9.8 (CRITICAL)

CVE Published

Jul 29, 2026 - 00:00 cve.org

CRITICAL 9.8

CVE Published

Jul 29, 2026 - 00:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_doctor.php via the parameters doctor and specilizationid.

AnalysisAI

SQL injection in kishan0725 Hospital Management System 4.0 lets remote attackers inject arbitrary SQL through the 'doctor' and 'specilizationid' parameters of get_doctor.php, yielding full read/write access to the backend database. The CVSS 9.8 vector (PR:N) indicates unauthenticated network exploitation, though no public exploit is identified and EPSS remains very low at 0.15%. This is an open-source PHP/MySQL project on GitHub rather than commercial enterprise software, so real-world exposure is limited despite the critical score.

Technical ContextAI

The affected component is a PHP web application (kishan0725/hospital-management-system) backed by a MySQL/MariaDB database, a classic LAMP-stack project. The root cause is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command): the get_doctor.php script concatenates the user-supplied 'doctor' and 'specilizationid' request parameters directly into an SQL query without parameterization or input sanitization. The CPE string provided is a placeholder (cpe:2.3:a:n/a:n/a:*) and does not identify a formal vendor/product, consistent with a community GitHub project; identification relies on the CVE description and the two TaintRadar analysis records rather than an authoritative CPE.

RemediationAI

No vendor-released patch is identified at time of analysis; this is a community GitHub project with no fix version in the provided data. The primary code-level fix is to rewrite the get_doctor.php database calls to use parameterized queries / prepared statements (PDO or mysqli bind parameters) for the 'doctor' and 'specilizationid' inputs, and add server-side type validation (e.g., cast specilizationid to integer). As compensating controls until upstream code is fixed: place the application behind authentication and restrict get_doctor.php to authenticated sessions (trade-off: breaks any intended public/AJAX use of the endpoint); deploy a WAF or ModSecurity ruleset to block SQL metacharacters on those two parameters (trade-off: signature-based filtering can be bypassed and may cause false positives on legitimate names); enforce least-privilege on the MySQL account so the web user cannot perform DDL or read other schemas (limits impact but not the injection itself). Track the upstream repository (github.com/kishan0725/hospital-management-system) for a patched release. Verify details via https://vuldb.com/vuln/384297 and the NVD entry.