What is the CVSS score of CVE-2025-69944?

CVE-2025-69944 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.1%.

Which versions of Hospital Management System are affected by CVE-2025-69944?

The kishan0725 Hospital Management System 4.0 contains an unauthenticated SQL injection vulnerability (CVE-2025-69944) that directly exposes patient medical history records to remote attackers with…

How to fix or mitigate CVE-2025-69944?

Within 24 hours, identify all instances of Hospital Management System 4.0 and immediately restrict network access to the view-medhistory.php endpoint via firewall rules, VPN requirement, or system isolation pending remediation. Within 7 days, conduct comprehensive audit of access logs for exploitation of the viewid parameter, notify privacy counsel and conduct patient impact assessment per HIPAA protocols, and establish disclosure procedures for affected individuals. Within 30 days, monitor vendor (kishan0725) for security patch release and apply immediately upon availability; as interim control, deploy Web Application Firewall (WAF) rules targeting SQL injection patterns in the viewid parameter, implement database-level read-only credentials for application access, enforce network segmentation, and maintain real-time logging of database access attempts.

Hospital Management System CVE-2025-69944

EUVD-2025-210540 HIGH

SQL Injection (CWE-89)

2026-07-29 mitre

GHSA-hcmx-6x6r-f6mp

PHP SQLi N A

7.3

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.3 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

vuln.today AI

7.3 HIGH

Unauthenticated HTTP endpoint with no prerequisites; partial CIA impact reflects SQL data read/write without full system or database server takeover.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Aug 04, 2026 - 20:30 vuln.today

CVE Published

Jul 29, 2026 - 00:00 cve.org

HIGH 7.3

CVE Published

Jul 29, 2026 - 00:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter.

AnalysisAI

SQL Injection in kishan0725 Hospital Management System 4.0 exposes patient medical history records to unauthenticated remote attackers via the viewid parameter of the view-medhistory.php endpoint. The CVSS vector confirms no authentication, complexity, or user interaction is required, and the SSVC framework independently verifies a proof-of-concept exists and the attack is fully automatable. Despite a low EPSS score of 0.14%, the sensitivity of medical record data and zero-barrier exploitation make any internet-exposed instance a meaningful risk; no public exploit identified at time of analysis as confirmed active exploitation (KEV not listed).

Technical ContextAI

The flaw is a classic CWE-89 SQL Injection in a PHP-based open-source hospital management web application. The view-medhistory.php endpoint accepts a user-supplied viewid parameter that is passed unsanitized into a backend SQL query, most likely against a MySQL or MariaDB database typical of PHP stacks. The NVD CPE entry (cpe:2.3:a:n/a:n/a:*:*:*:*:*:*:*:*) is generic and unresolved, confirming the project lacks a formal vendor catalog entry and is a community-maintained GitHub project. The TaintRadar research group identified this flaw through taint-based static analysis tooling, as documented in their public disclosure writeup. CWE-89 root cause indicates the application fails to use parameterized queries or prepared statements, allowing metacharacter injection to alter query logic.

RemediationAI

No vendor-released patch or fixed version has been identified at time of analysis. The primary code-level fix is to replace dynamic SQL string concatenation in view-medhistory.php with PHP prepared statements (PDO or MySQLi), which eliminates the injection surface entirely - this is the only reliable long-term fix. As an immediate compensating control, restrict access to the Hospital Management System application to trusted internal IP ranges or require VPN connectivity before any endpoint is reachable, directly blocking the AV:N attack vector. Deploying a Web Application Firewall with SQLi signature rules on the viewid parameter can reduce automated scanning success but should not substitute for code-level remediation, as WAFs can be bypassed. Additionally, audit and restrict the database user account used by the application to the minimum required privileges (SELECT only on specific tables if possible), limiting the data an attacker can retrieve even if injection succeeds. The public POC at https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/hospitalmanagementsystemproject/20250811-hospital-management-system-view-medhistory.php-viewid-sqli/20250811-hospital-management-system-view-medhistory.php-viewid-sqli.md provides technical detail useful for validating any applied fix.