Hospital Management System EUVD-2026-68807

No special conditions - remote unauthenticated exploitation against default configurations of kishan0725 Hospital-Management-System 1.0. The CVSS 4.0 vector confirms AV:N/AC:L/AT:N/PR:N/UI:N: the attack is fully network-based, requires no privileges, and involves no user interaction. The only practical limiting factor is whether the application is internet-exposed versus restricted to an internal network; intranet-only deployments reduce but do not eliminate risk from insider threats or post-compromise lateral movement.

The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) reflects the most dangerous exploitability profile - low complexity, no authentication, and fully remote. Impact is rated Low across confidentiality, integrity, and availability (VC:L/VI:L/VA:L), indicating data exposure and limited manipulation rather than full system compromise without additional chaining. The E:P supplemental modifier confirms a public exploit exists, materially increasing opportunistic risk in the near term. EPSS data is absent from the provided intelligence, so probability-of-exploitation-in-the-wild cannot be quantified from available signals. The vulnerability is not currently listed in CISA KEV, suggesting no confirmed large-scale active exploitation at time of analysis. However, the sensitivity of the data context - patient contact records in a healthcare application - means any internet-exposed deployment should be treated as high priority regardless of the moderate composite score.

An unauthenticated attacker discovers an internet-exposed instance of Hospital-Management-System and sends a crafted HTTP request to /search.php with a UNION-based or error-based SQL payload in the Contact parameter. Using the publicly available exploit code, the attacker extracts database contents including patient records and potentially application credentials. No authentication or special server configuration is required beyond the application being network-reachable.