Export CSV

Products

1 vendor
VendorProductsCVEsKEVAvg EPSSWorst Severity
1109.6%HIGH

Related CVEs

1
CVE IDDescriptionSeverityCVSSKEVEPSSPublished
CVE-2025-63497The patient prescription viewing functionality in his_doc_view_single_patient.php of rickxy Hospital Management System version 1.0 contains an SQL injection vulnerability. The pat_number GET parameter is directly concatenated into SQL queries without proper sanitization, allowing authenticated attackers (doctor role) to execute arbitrary SQL queries.HIGH7.19.6%Nov 10, 2025