CVE-2025-63512

Medium · 6.5

CVSS

6.5

EPSS

0.3%

Published

Nov 18, 2025

CISA due date

—

The record

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL query.

Affected packages

Ecosystem	Package	Introduced	Fixed