high7.3Public exploit code
CVE-2025-5298
A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Campcodes Online Hospital Management System 1.0 - SQL Injection2025-05-29 · webapps · multiple
Impact
A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Campcodes | Online Hospital Management System | Version 1.0 |