A critical SQL injection vulnerability in PHPGurukul Hospital Management System 4.0 allows unauthenticated remote attackers to manipulate database queries, posing a significant risk to data integrity.

This is a SQL injection vulnerability (CWE-89) occurring within the /admin/edit-doctor.php file. The vulnerability is triggered by an unauthenticated attacker manipulating the docfees argument.

Successful exploitation of this SQL injection vulnerability could lead to unauthorized access to the underlying database, potentially resulting in the theft or modification of sensitive patient records. With a CVSS score of 7.3, this high-severity flaw represents a substantial risk to organizational data confidentiality and compliance requirements, as it allows for remote, unauthenticated interaction with the backend database.

Immediate Action: Since no official patch is currently available, administrators should restrict access to the /admin/ directory using IP allowlisting or VPN requirements to prevent external exploitation.

Proactive Monitoring: Monitor database query logs for anomalous patterns, such as unexpected SQL syntax characters or unauthorized attempts to access the doctor information tables.

Compensating Controls: Deploy a Web Application Firewall (WAF) with custom rules designed to detect and block SQL injection payloads targeting the docfees parameter.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the technical write-up at the provided GitHub reference.

Given the availability of a public proof-of-concept and the ease of exploitation, this vulnerability requires immediate attention. Organizations currently running version 4.0 of the PHPGurukul Hospital Management System should prioritize implementing the suggested compensating controls and strictly limit network exposure until a permanent vendor patch is released.