CVE-2025-6408

A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89
• CWE-89

• https://github.com/ASantsSec/CVE/issues/15Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.313402Permissions Required, VDB Entry
• https://vuldb.com/?id.313402Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.598207Third Party Advisory, VDB Entry
• https://www.campcodes.com/Product
• https://github.com/ASantsSec/CVE/issues/15Exploit, Third Party Advisory

Published

Jun 21, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-64067Primakon Pi Portal 1.0.18 API endpoints responsible for retr…5.3
• CVE-2025-6407A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-64070Sourcecodester Student Grades Management System v1.0 is vuln…5.4
• CVE-2025-64074A path-traversal vulnerability in the logout functionality o…5.3
• CVE-2025-64075A path traversal vulnerability in the check_token function o…10
• CVE-2025-64076Multiple vulnerabilities exist in cbor2 through version 5.7.…7.5
• CVE-2025-64081SQL injection vulnerability in /php/api_patient_schedule.php…9.8
• CVE-2025-64084An authenticated SQL injection vulnerability exists in Cloud…5.4
• CVE-2025-64085A NULL pointer dereference vulnerability in the importDataOb…7.5
• CVE-2025-64086A NULL pointer dereference vulnerability in the util.readFil…7.5
• CVE-2025-64087A Server-Side Template Injection (SSTI) vulnerability in the…9.8
• CVE-2025-6409A vulnerability was found in PHPGurukul Art Gallery Manageme…9.8