CVE-2020-22165 PHPGurukul Hospital Management System 4.0 - SQL Injection · CloudMap

高危CVE-2020-22165

PHPGurukul Hospital Management System 4.0 - SQL Injection

披露于 2025/11/20 · 更新于 2026/01/12

CVSS 评分—/ 10.0

EPSS 概率—利用概率预测

漏洞描述

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain sensitive database information.

影响产品

hospital_management_system_projecthospital_management_system查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

github.comhttps://github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cve↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2020-22165↗

RELATED INTELLIGENCE

同产品关联漏洞

与 hospital_management_system 相关的其他公开漏洞。

查看全部 →

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2021-39411 Hospital Management System 1.0 - Cross-Site Scripting hospital_management_system	中危	—	—	PoCEXP	2025/11/20
CVE-2022-38637 Hospital Management System 1.0 - SQL Injection hospital_management_system	严重	9.8	57.7%	PoCEXP	2022/09/14
CVE-2022-34590 Hospital Management System 1.0 - SQL Injection hospital_management_system	高危	7.2	4.2%	PoCEXP	2022/07/21
CVE-2022-32094 Hospital Management System 1.0 - SQL Injection hospital_management_system	严重	9.8	33.2%	PoCEXP	2022/07/02
CVE-2020-5192 Hospital Management System 4.0 - SQL Injection hospital_management_system	高危	8.8	26.2%	PoCEXP	2020/01/06
CVE-2020-5191 PHPGurukul Hospital Management System - Cross-Site Scripting hospital_management_system	中危	6.1	3.9%	PoCEXP	2020/01/06