EUVD-2025-18890Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
6DescriptionCVE.org
A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
AnalysisAI
A critical SQL injection vulnerability exists in Campcodes Online Hospital Management System version 1.0 affecting the /doctor/search.php endpoint via the 'searchdata' parameter. An unauthenticated remote attacker can execute arbitrary SQL queries, potentially compromising confidentiality, integrity, and availability of the hospital database. Public exploit disclosure and lack of authentication requirements significantly elevate real-world risk.
Technical ContextAI
The vulnerability is a classic SQL injection flaw (CWE-74: Improper Neutralization of Special Elements used in an SQL Command) in the PHP-based hospital management application. The /doctor/search.php file directly incorporates user-supplied input from the 'searchdata' parameter into SQL queries without proper parameterized statements or input validation. This allows attackers to inject malicious SQL syntax (UNION-based, time-based blind, error-based, or stacked queries) to extract or modify database records. The affected product is Campcodes Online Hospital Management System 1.0, a web-based healthcare administration platform. The vulnerability stems from inadequate use of prepared statements or stored procedures in the search functionality.
RemediationAI
Immediate actions: (1) Implement parameterized queries/prepared statements in /doctor/search.php—replace all dynamic SQL concatenation with parameterized queries using PDO or mysqli prepared statements; (2) Apply strict input validation to the 'searchdata' parameter (whitelist alphanumeric characters and necessary symbols; reject SQL keywords and special characters); (3) Deploy Web Application Firewall (WAF) rules to detect and block SQL injection patterns (ModSecurity CRS rules, AWS WAF SQL injection signatures); (4) Implement database principle of least privilege—restrict the application database user account to SELECT-only permissions where possible; (5) Enable database query logging and alerts for suspicious activity. Long-term: Contact Campcodes directly to obtain a patched version or consider migrating to a maintained, security-audited hospital management platform. No official patch is currently available; vendor response time is unknown.
More from same product – last 7 days
Authentication bypass in Discuz! X5.0 releases 20260320 through 20260501 allows unauthenticated remote attackers to acce
Authenticated remote code execution in Discuz! X5.0 releases 20260320 through 20260501 allows administrators to chain a
Unauthenticated PHP Object Injection in the Happyforms WordPress plugin (versions <= 1.26.13) allows remote attackers to
Unauthenticated PHP Object Injection in the Broadcast Live Video WordPress plugin (versions prior to 7.1.3) allows remot
Unauthenticated PHP object injection in the WordPress plugin 'Integration for Keap/Infusionsoft and Contact Form 7, WPFo
Share
External POC / Exploit Code
Leaving vuln.today