HIGH

CVE-2020-22165

CVSS v3

7.5

HIGH

EPSS Score

29.1%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

Technical details

Published
6/22/2021

Frequently asked questions

What is CVE-2020-22165?

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

Is CVE-2020-22165 actively exploited?

Active exploitation of CVE-2020-22165 has not been confirmed. The EPSS score is 29.1%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-22165?

CVE-2020-22165 has a CVSS v3 base score of 7.5 (HIGH severity).

Is CVE-2020-22165 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.