CVE-2025-6766

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-6766

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-6766.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-6766

Published

2025-06-27T12:31:05Z

Modified

2026-10-28T02:31:13Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

sfturing hosp_order OfficeServiceImpl.java getOfficeName sql injection

Details

A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. It has been declared as critical. This vulnerability affects the function getOfficeName of the file OfficeServiceImpl.java. The manipulation of the argument officesName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-74",
        "CWE-89"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/6xxx/CVE-2025-6766.json"
}

References

Affected packages

Git / github.com/sfturing/hosp_order

Affected ranges

Type

GIT

Repo

https://github.com/sfturing/hosp_order

Events

Introduced

627f426331da8086ce8fff2017d65b1ddef384f8

Last Affected

627f426331da8086ce8fff2017d65b1ddef384f8

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "627f426331da8086ce8fff2017d65b1ddef384f8"
                },
                {
                    "last_affected":  "627f426331da8086ce8fff2017d65b1ddef384f8"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        }
    ]
}

Affected versions

Other

627f426331da8086ce8fff2017d65b1ddef384f8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-6766.json"