The Hospital Management System version 4.0 by kishan0725 is affected by an SQL Injection vulnerability in the check_availability.php file. The vulnerability arises from improper sanitization of the emailid and email parameters, allowing injection of malicious SQL code. This can lead to unauthorized database queries and compromise of sensitive information. No CVSS score or detailed impact metrics are provided. No vendor advisory or patch information is available, and the vulnerability is currently published without known active exploitation.

Successful exploitation of this SQL Injection vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database. This may result in unauthorized data disclosure, data modification, or other database-related impacts depending on the database permissions and configuration. The exact impact is not detailed in the source data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to implement input validation and parameterized queries for the affected parameters (emailid and email) to mitigate injection risks.