Critical
Low
Medium
CVE-2025-57254
Overview
An SQL injection vulnerability in user-login.php and index.php of Karthikg1908 Hospital Management System (HMS) 1.0 allows remote attackers to execute arbitrary SQL queries via the username and password POST parameters. The application fails to properly sanitize input before embedding it into SQL qu...
Critical
Low
Medium
No items found.