CVE-2025-9770 MEDIUM

CVE-2025-9770: Campcodes Hospital Management System Admin Dashboard Login admin sql injection

Vendor Campcodes
Product Hospital Management System
Weakness CWE-89 · SQLi
Published September 1, 2025
Last update September 2, 2025
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A weakness has been identified in Campcodes Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Dashboard Login. This manipulation of the argument Password causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.

Key dates

02Disclosure timeline

September 1, 2025 CVE published
September 2, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-40827 Authenticated SQLi in _RemoveRequest function CVE-2023-4866 SourceCodester Online Tours & Travels Management System booking.php exec sql injection CVE-2024-2944 Campcodes Online Examination System deleteCourseExe.php sql injection CVE-2026-24993 WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.3 - SQL Injection vulnerability CVE-2025-5631 code-projects/anirbandutta9 Content Management System/News-Buzz publicposts.php sql injection