Hospital Management System SQL Injection Vulnerability (CNVD-2022-70101)

Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A SQL injection vulnerability exists in Hospital Management System v1.0, which stems from the lack of validation of externally entered SQL statements in room.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive data from the database.