SQL Injection in hospital-management-system-in-php 378c157 in index.php

Description

Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI.

Vulnerability

A sql injection (SQLI) vulnerability has been identified in Hospital management system. This allows bypassing authentication and access as any user.

Exploit

POST /hospital-management-system-php-mysql-master/index.php HTTP/1.1
Host: vulnerable.com
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*

Evidence of exploitation

Our security policy

We have reserved the ID CVE-2023-5053 to refer to this issue from now on. Disclosure policy

System Information

• Version: hospital-management-system-in-php 378c157

• Operating System: GNU/Linux

Mitigation

There is currently no patch available for this vulnerability.

References

• Vendor page https://github.com/projectworldsofficial/hospital-management-system-in-php/