A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as critical. Impacted is an unknown function of the file index.php. The manipulation of the argument Username results in sql injection.

This vulnerability was named CVE-2025-56214. The attack may be performed from a remote location. There is no available exploit.