CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')