Vulnerabilidades de Kishan0725
CVEs publicadas que afetam produtos de Kishan0725: 3 registro(s), com severidade, exploração e correções.
CVE-2025-63514
Média · 6.1
CWE-79 18/11/2025
Cross-site Scripting (XSS) em Kishan0725 Hospital Management System
kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the email parameter.
CVE-2025-63513
Média · 6.5
CWE-639 18/11/2025
Authorization Bypass Through User-Controlled Key (IDOR) em Kishan0725 Hospital Management System
kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functionality.
CVE-2025-63512
Média · 6.5
CWE-89 18/11/2025
SQL Injection em Kishan0725 Hospital Management System
kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL query.