Free Hospital Management System SQL Injection Vulnerability

The Free Hospital Management System is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. The Free Hospital Management System suffers from a SQL injection vulnerability that originates from a lack of validation of the search parameter in file /vm/admin/doctors.php against externally entered SQL statements, which can be exploited by an attacker to execute illegal SQL commands to steal sensitive database data.