Security Advisory

CVE-2025-63512

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-11-18 00:00:00
Last updated 2025-11-18 17:11:03
Assigner mitre
State PUBLISHED

Description

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL query.