The kishan0725 Hospital Management System version 4.0 is susceptible to a high-severity SQL injection vulnerability that allows unauthenticated remote attackers to manipulate backend database queries.

The application fails to properly sanitize user input within the editid parameter of the /doctor/edit-patient.php endpoint. This allows an unauthenticated attacker to inject malicious SQL statements, potentially leading to unauthorized data access or modification.

Successful exploitation of this vulnerability could lead to the unauthorized disclosure, modification, or deletion of sensitive patient data stored within the system database. Given the CVSS score of 7.3, this flaw poses a significant risk to data integrity and confidentiality, and it may result in regulatory non-compliance or severe reputational damage for healthcare providers utilizing the software.

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected endpoint at the network level or disable the vulnerable module if it is not business-critical.

Proactive Monitoring: Monitor web server logs for suspicious URL patterns containing SQL syntax or unusual parameters directed at the /doctor/edit-patient.php file.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeting the application input parameters.

Public Exploit Available: Yes, a public proof-of-concept is documented in the technical write-up referenced in the CVE record.

Due to the lack of an official patch and the presence of a public proof-of-concept, organizations must prioritize isolating the vulnerable component. Administrators should restrict access to the affected management interface immediately and apply strict input validation at the WAF level until the vendor releases a security update.