CVE-2025-4739

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in projectworlds Hospital Database Management System 1.0. It has been classified as critical. This affects an unknown part of the file /medicines_info.php. The manipulation of the argument Med_ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
projectworlds	Hospital Database Management System	1.0

References

https://github.com/3169417664/cve/issues/1Exploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?ctiid.309039Permissions Required, VDB Entry
https://vuldb.com/?id.309039Third Party Advisory, VDB Entry
https://vuldb.com/?submit.570855Third Party Advisory, VDB Entry

Timeline

Published: May 16, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-473907.8Memory corruption while preprocessing IOCTL request in JPEG driver.CVE-2025-473917.8Memory corruption while processing a frame request from user.CVE-2025-473928.8Memory corruption when decoding corrupted satellite data files with invalid signature offsets.CVE-2025-473937.8Memory corruption when accessing resources in kernel driver.CVE-2025-473947.8Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.CVE-2025-473956.5Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.CVE-2025-473967.8Memory corruption occurs when a secure application is launched on a device with insufficient memory.CVE-2025-473977.8Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.CVE-2025-473987.8Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.CVE-2025-473997.8Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.CVE-2025-47405.3A vulnerability was found in BeamCtrl Airiana up to 11.0. It has been declared as problematic. This vulnerability affects unknown code of th CVE-2025-474007.1Cryptographic issue while copying data to a destination buffer without validating its size.