What’s Vulnerable › Vulnerabilities

CVE-2020-35745

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-01-07 · updated 2026-06-17
• Weakness: CWE-862

Description

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs.

Affected products

• PHPGurukul Hospital Management System: 4.0

References

• https://medium.com/%40ashketchum/privilege-escalation-unauthenticated-access-to-admin-portal-cve-2020-35745-bb5d5dca97a0
• https://www.phpgurukul.com/hospital-management-system-in-php/
• https://www.youtube.com/watch?v=vnSsg6iwV9Y&feature=youtu.be&ab_channel=ashketchum
• https://medium.com/%40ashketchum/privilege-escalation-unauthenticated-access-to-admin-portal-cve-2020-35745-bb5d5dca97a0
• https://www.phpgurukul.com/hospital-management-system-in-php/
• https://www.youtube.com/watch?v=vnSsg6iwV9Y&feature=youtu.be&ab_channel=ashketchum

Get alerted when CVE-2020-35745 or the next vulnerability affects your stack