CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functionality.

• CWE-639

• https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospital_Management_System_IDOR.mdExploit, Third Party Advisory
• https://github.com/kishan0725/Hospital-Management-System/issues/55Issue Tracking, Vendor Advisory
• https://github.com/kishan0725/Hospital-Management-System/issues/55Issue Tracking, Vendor Advisory

Published

Nov 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-63497The patient prescription viewing functionality in his_doc_vi…7.1
• CVE-2025-63498alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XS…6.1
• CVE-2025-63499Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XS…6.1
• CVE-2025-6350The WP VR – 360 Panorama and Free Virtual Tour Builder For W…5.4
• CVE-2025-6351A vulnerability was found in itsourcecode Employee Record Ma…9.8
• CVE-2025-63512kishan0725 Hospital Management System/ v4 is vulnerable to S…6.5
• CVE-2025-63514kishan0725 Hospital Management System has a Cross-Site Scrip…6.1
• CVE-2025-6352A vulnerability classified as problematic has been found in …9.1
• CVE-2025-63520Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 v…6.1
• CVE-2025-63522Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Co…4.6
• CVE-2025-63523FeehiCMS version 2.1.1 fails to enforce server-side immutabi…6.5
• CVE-2025-63525An issue was discovered in Blood Bank Management System 1.0 …8.8