CVE-2025-65340

Received Received - Intake

SQL Injection in Kishan0725 Hospital Management System

Publication date: 2026-07-29

Last updated on: 2026-07-29

Assigner: MITRE

Description

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-29

Last Modified

2026-07-29

Generated

2026-07-30

AI Q&A

2026-07-30

EPSS Evaluated

N/A

NVD

CVE-2025-65340

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

The vulnerability is a SQL Injection in the Hospital Management System 4.0, specifically in the /betweendates-detailsreports.php file. This allows attackers to manipulate SQL queries by injecting malicious code, potentially accessing or altering sensitive database information.

Impact Analysis

This vulnerability could allow unauthorized access to patient records, financial data, or other sensitive information stored in the hospital management system. Attackers might extract, modify, or delete data, leading to privacy breaches or system disruptions.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA, as it may result in unauthorized access to protected health information (PHI) or personal data. Organizations could face legal penalties, fines, or reputational damage due to data breaches.

Mitigation Strategies

Immediately update the Hospital Management System to the latest patched version. If no patch is available, consider disabling the affected /betweendates-detailsreports.php endpoint or restricting access to trusted IPs. Review database logs for suspicious queries or unauthorized access attempts.

Hi! I’m here to help you understand CVE-2025-65340. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70