Cyber Posture

CVE-2025-2664

MediumPublic PoC

Published: 23 March 2025

Published
23 March 2025
Modified
13 May 2025
KEV Added
Patch
CVSS Score 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0005 16.3th percentile
Risk Priority 9 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may leverage databases to mine valuable information.

Security Summary

CVE-2025-2664 is a critical SQL injection vulnerability in CodeZips Hospital Management System version 1.0, published on 2025-03-23. The issue affects an unknown functionality within the file /suadpeted.php, where manipulation of the ID argument enables SQL injection. It is associated with CWE-74 (improper neutralization of special elements) and CWE-89 (SQL injection), with a CVSS v3.1 base score of 4.7 (AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L).

The vulnerability can be exploited remotely by attackers who possess high privileges (PR:H), requiring network access and low complexity with no user interaction needed. Successful exploitation allows limited impacts: low confidentiality (C:L) via potential data exposure, low integrity (I:L) through data modification, and low availability (A:L) disruption.

Advisories from VulDB and a related GitHub repository detail the vulnerability, confirming the SQL injection via the ID parameter in /suadpeted.php. The exploit has been publicly disclosed in the GitHub document "SQL_Injection_in_Hospital_Management_System.md" and may be actively used by attackers.

Notable context includes the public availability of the exploit, increasing the risk for unpatched instances of this hospital management system. No evidence of widespread real-world exploitation is specified in the available data.

Details

CWE(s)
CWE-74CWE-89

Affected Products

codezips
hospital management system
1.0

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1213.006 Databases Collection
Adversaries may leverage databases to mine valuable information.
Why these techniques?

SQL injection vulnerability in public-facing web application (/suadpeted.php) enables exploitation of public-facing applications (T1190) and facilitates unauthorized data collection from databases (T1213.006).

References