CVE-2026-2179

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability was determined in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /admin/manage-users.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
PHPGurukul	Hospital Management System	4.0

References

https://github.com/Shaon-Xis/PHPGurukul-HMS-SQLi-PoC/tree/mainExploit, Third Party Advisory
https://github.com/Shaon-Xis/PHPGurukul-HMS-SQLi-PoC/tree/main#4-proof-of-concept-reproduction-stepsExploit, Third Party Advisory
https://phpgurukul.com/Product
https://vuldb.com/?ctiid.344882Permissions Required, VDB Entry
https://vuldb.com/?id.344882Third Party Advisory, VDB Entry
https://vuldb.com/?submit.749592Third Party Advisory, VDB Entry

Timeline

Published: Feb 8, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-217906.3HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authe CVE-2026-217913.3HCL Sametime for Android is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certai CVE-2026-21808.8A vulnerability was identified in Tenda RX3 16.03.13.11. Affected is an unknown function of the file /goform/fast_setting_wifi_set. Such man CVE-2026-218069.8HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application allows multiple simultaneo CVE-2026-218073.9HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to caus CVE-2026-218084.1HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage CVE-2026-218093.9HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malform CVE-2026-21818.8A security flaw has been discovered in Tenda RX3 16.03.13.11. Affected by this vulnerability is an unknown functionality of the file /goform CVE-2026-218104.4HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an CVE-2026-218113.8HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext CVE-2026-218122.2HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicat CVE-2026-21827.2A weakness has been identified in UTT 进取 521G 3.1.1-190816. Affected by this issue is the function doSystem of the file /goform/setSysAdm. E