CVE Feed

    Dashboard / CVE / CVE-2025-11609

    CVE-2025-11609

    A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component express-session. This manipulation of the argument secret with the input secret causes use of hard-coded cryptographic key . The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is told to be difficult. The exploit has been published and may be used.

    Published:Oct 11, 2025
    Last Modified:Feb 24, 2026
    EPS:Oct 11, 2025
    EPSS Score:0.00243
    CVSS Score:3.7

    Affected Products

    Vendor
    Code-projects
    Product
    Hospital Management System
    Vendor
    Fabian
    Product
    Hospital Management System

    Exploits

    https://github.com/lakshayyverma/CVE-Discovery/blob/main/Hospital%20Management%20System.mdhttps://github.com/lakshayyverma/CVE-Discovery/blob/main/Hospital%20Management%20System.md

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-8955 (CVSS 5.5) — A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknow…
    CVE-2025-8954 (CVSS 5.5) — A vulnerability was identified in PHPGurukul Hospital Management System 4.0. This affects an unknown part of t…
    CVE-2025-3206 (CVSS 5.3) — A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. Thi…
    CVE-2024-12976 (CVSS 6.9) — A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. …
    CVE-2024-10350 (CVSS 5.1) — A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. T…
    CVE-2024-10169 (CVSS 5.3) — A vulnerability classified as critical was found in code-projects Hospital Management System 1.0. This vulnera…
    CVE-2024-8944 (CVSS 6.9) — A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. …
    CVE-2024-8368 (CVSS 6.9) — A vulnerability was found in code-projects Hospital Management System 1.0. It has been rated as critical. Affe…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High