CVE-2022-38637

9.8 criticalEPSS 6.1%

Critical (9.8) in hospital management system project hospital management system. EPSS 6.1% chance of exploitation in the next 30 days.

Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters on the Login page.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 6.1% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hospital_management_system_project:hospital_management_system

References

https://owasp.org/www-community/attacks/SQL_Injection
https://www.youtube.com/watch?v=m8nW0p69UHU
https://owasp.org/www-community/attacks/SQL_Injection
https://www.youtube.com/watch?v=m8nW0p69UHU

Check your stack JSON