Skip to content

Instantly share code, notes, and snippets.

@celbahraoui

celbahraoui/CVE-2023-41532.md

Created August 7, 2025 16:05
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save celbahraoui/9972727c6770cd63386ebbe07a9c1454 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save celbahraoui/9972727c6770cd63386ebbe07a9c1454 to your computer and use it in GitHub Desktop.
Download ZIP
Public reference for CVE-2023-41532
Raw
CVE-2023-41532.md

CVE-2023-41532 - SQL Injection in Hospital Management System v4

Description

Hospital Management System v4 was discovered to contain a SQL injection vulnerability in the doctorsearch.php file. The doctor_contact parameter is not properly sanitized before being used in SQL queries, allowing remote attackers to manipulate the database and potentially execute arbitrary code or disclose sensitive information.

Vulnerability Type

SQL Injection

Affected Product

Attack Details

  • Attack Type: Remote
  • Attack Vector: doctor_contact parameter
  • Impact:
    • Code Execution
    • Information Disclosure

References

Discoverer

Chaima EL BAHRAOUI

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment