EUVD-2025-16904
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Lifecycle Timeline
4Description
A vulnerability, which was classified as critical, was found in Campcodes Hospital Management System 1.0. Affected is an unknown function of the file /admin/registration.php. The manipulation of the argument full_name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Analysis
Critical SQL injection vulnerability in Campcodes Hospital Management System version 1.0 affecting the /admin/registration.php endpoint. An unauthenticated remote attacker can inject arbitrary SQL commands via the 'full_name' parameter, potentially leading to unauthorized data access, modification, or denial of service. The vulnerability has public exploit disclosure and demonstrates active exploitation risk in healthcare environments.
Technical Context
The vulnerability exists in the registration.php administrative interface where user-supplied input from the 'full_name' parameter is insufficiently sanitized before being incorporated into SQL queries. This is a classic CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component - 'Injection') vulnerability, specifically manifesting as SQL injection (CWE-89). The affected application is Campcodes Hospital Management System, a PHP-based healthcare administration platform. The vulnerability exploits insufficient input validation and parameterized query implementation, allowing direct SQL command injection without authentication. The /admin/ path designation suggests this administrative function lacks proper access controls or authentication bypass is possible.
Affected Products
- product: Campcodes Hospital Management System; version: 1.0; component: /admin/registration.php; affected_parameter: full_name; cpe: cpe:2.3:a:campcodes:hospital_management_system:1.0:*:*:*:*:*:*:*; status: Vulnerable
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today