CVE-2021-43630: Projectworlds Hospital Management System In PHP

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web server.

Affected products

• Projectworlds Hospital Management System In PHP: version 1.0 only

Published 2021-12-22. Last modified 2026-06-17.