CVE-2026-2179

Published February 8th, 2026

View on NVD ↗

CVSS v3

4.7

MEDIUM

CVSS v2

5.8

MEDIUM

Affected

PROJECT

Description

A vulnerability was determined in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /admin/manage-users.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Shaon-Xis/PHPGurukul-HMS-SQLi-PoC

Proof of Concept for SQL Injection vulnerability in PHPGurukul Hospital Management System V4.0 (manage-users.php)

GitHub