A weakness has been identified in Campcodes Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Dashboard Login. This manipulation of the argument Password causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.
References
| Link | Resource |
|---|---|
| https://github.com/Yashh-G/zero-day-research/blob/main/HMS_Admin_Auth_Bypass.pdf | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.322070 | Permissions Required VDB Entry |
| https://vuldb.com/?id.322070 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.640807 | VDB Entry |
| https://www.campcodes.com/ | Product |
Configurations
History
04 Sep 2025, 16:43
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Campcodes
Campcodes hospital Management System |
|
| References | () https://github.com/Yashh-G/zero-day-research/blob/main/HMS_Admin_Auth_Bypass.pdf - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.322070 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.322070 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.640807 - VDB Entry | |
| References | () https://www.campcodes.com/ - Product | |
| CPE | cpe:2.3:a:campcodes:hospital_management_system:1.0:*:*:*:*:*:*:* |
01 Sep 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-01 09:15
Updated : 2025-09-04 16:43
NVD link : CVE-2025-9770
Mitre link : CVE-2025-9770
CVE.ORG link : CVE-2025-9770
JSON object : View
Products Affected
campcodes
- hospital_management_system