SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php.