kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL query.
| Software | From | Fixed in |
|---|---|---|
| kishan0725 / hospital_management_system | 4.0 | 4.0.x |