SQL Injection Vulnerability in Hospital-Management-System

A SQL injection vulnerability has been identified in version 1.0 of the Hospital-Management-System developed by kishan0725. The flaw resides in the handling of the 'Contact' argument within the '/search.php' script, which fails to properly sanitize user-supplied input before incorporating it into database queries. This vulnerability allows an unauthenticated, remote attacker to execute arbitrary SQL commands against the backend database. A public exploit is available, increasing the risk of exploitation. Given that the vendor is unresponsive and no patch exists, defenders should treat this as a high-priority risk for internet-facing instances of this software.

Impact

Successful exploitation of this vulnerability allows unauthorized access to sensitive healthcare data stored in the application database. An attacker could potentially extract, modify, or delete administrative and patient records, leading to a significant data breach or compromise of system integrity.

Recommendation

Deploy web application firewall (WAF) rules to inspect and filter suspicious SQL injection patterns in the 'Contact' parameter of requests directed to '/search.php'. If the system is not critical, restrict access to the application via network-level controls until the vendor releases a security update.