The vulnerability arises in the doctorprofile.php file of itsourcecode Hospital Management System version 1.0, where the doctorname argument is concatenated directly into a database query without proper sanitization. This flaw allows a remote attacker to inject arbitrary SQL commands, potentially reading sensitive patient records, modifying or deleting data, and possibly escalating privileges to gain wider control over the application. The CVSS score of 5.3 indicates moderate severity, reflecting the potential impact on confidentiality, integrity, and availability of the system’s data.

Affected primarily the itsourcecode Hospital Management System product, specifically version 1.0, accessing the doctorprofile.php endpoint via HTTP interfaces.

The CVSS rating indicates a moderate risk level. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed exploitation in the public domain. The attack vector is remote, leveraging a crafted HTTP request to the doctorprofile.php endpoint. No authentication requirement is explicitly stated, implying that unauthenticated exploitation may be possible, though this is inferred from the description. Attackers could use automated scanners to discover and exploit the flaw, leading to data breaches or unauthorized data manipulation.