The kishan0725 Hospital-Management-System is vulnerable to remote SQL injection, which could allow an unauthenticated attacker to compromise backend database integrity.

The application fails to properly sanitize user input in the Contact parameter of the search.php file, resulting in an SQL injection vulnerability that is accessible to unauthenticated remote attackers.

Successful exploitation of this vulnerability allows an attacker to manipulate database queries, potentially leading to unauthorized data access, modification, or deletion. Given the CVSS score of 7.3, this high severity flaw poses a significant risk to the confidentiality and integrity of patient or administrative records managed by the system.

Immediate Action: As there is no official vendor patch available, administrators should restrict network access to the affected search.php endpoint immediately or consider disabling the component until a fix is provided.

Proactive Monitoring: Review web server access logs for anomalous requests containing SQL syntax patterns or unexpected characters in the Contact parameter.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to inspect and block requests containing SQL injection payloads directed at the search.php endpoint.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the technical write-up provided via the referenced Feishu link.

Due to the lack of a vendor-supplied patch and the presence of a public proof-of-concept, this vulnerability represents an immediate risk. Organizations utilizing this software must prioritize isolating the affected component from the public internet and implementing stringent input validation via a WAF to prevent exploitation.