CVE-2020-22173: Phpgurukul Hospital Management System

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

Affected products

• Phpgurukul Hospital Management System: version 4.0 only

Published 2021-06-22. Last modified 2026-06-17.