Kishan0725 vulnerabilities
Published CVEs affecting Kishan0725 products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-82914
High · 7.3
CWE-74 Aug 31, 2026
kishan0725 Hospital-Management-System search.php sql injection
A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-63514
Medium · 6.1
CWE-79 Nov 18, 2025
Cross-site Scripting (XSS) in Kishan0725 Hospital Management System
kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the email parameter.
CVE-2025-63513
Medium · 6.5
CWE-639 Nov 18, 2025
Authorization Bypass Through User-Controlled Key (IDOR) in Kishan0725 Hospital Management System
kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functionality.
CVE-2025-63512
Medium · 6.5
CWE-89 Nov 18, 2025
SQL Injection in Kishan0725 Hospital Management System
kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL query.