CVE-2022-25402

CRITICAL 9.1CVE-2022-25402 · Published 24/02/2022 · updated 17/06/2026

In short

CVE-2022-25402 is a CRITICAL (CVSS 9.1) vulnerability affecting hospital management system (hospital management system project).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hospital management system hospital_management_system_project	`= 1.0`	No fix yet

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

In short

CVE-2022-25402 is a CRITICAL (CVSS 9.1) vulnerability affecting hospital management system (hospital management system project).

Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.9% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

= 1.0

No fix yet

More vulnerabilities in hospital management system

See all →