CVE-2026-2134

Published February 8th, 2026

View on NVD ↗

CVSS v3

4.7

MEDIUM

CVSS v2

5.8

MEDIUM

Affected

PROJECT

Description

A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0. The affected element is an unknown function of the file /hms/admin/manage-doctors.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Shaon-Xis/PHPGurukul-HMS-SQL-Injection

SQL Injection vulnerability found in PHPGurukul Hospital Management System (HMS) v4.0

GitHub