Critical severity9.8NVD Advisory· Published Aug 10, 2023· Updated Jun 17, 2026

CVE-2023-37069

Description

Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the login id and password fields during the login process, enabling an attacker to inject malicious SQL code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Online Hospital Management System Project/Online Hospital Management System
cpe:2.3:a:online_hospital_management_system_project:online_hospital_management_system:1.0:*:*:*:*:*:*:*
Code Projects/Hospital Management Systemcpe-rescue
Code Projects/Online Hospital Management Systemllm-fuzzy
Range: 1.0

Patches

Vulnerability mechanics

References

github.com/Mr-Secure-Code/My-CVE/blob/main/CVE-2023-37069-Exploit.mdnvdExploitThird Party Advisory
code-projects.org/online-hospital-management-system-in-php-with-source-code/nvdProduct
github.com/riteshs4hu/My-CVE/blob/main/CVE-2023-37069-Exploit.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000