medium4.7
CVE-2026-2134
A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0.
Impact
A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0. The affected element is an unknown function of the file /hms/admin/manage-doctors.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgurukul | Hospital Management System | Version 4.0 |