Priority HIGH 82
SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd (on March 13, 2021), allows attackers to execute arbitrary commands via the contact and doctor par…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0088 · Published 2023-01-20 · No fix listed CWE-89
Priority HIGH 80
Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00809 · Published 2023-09-29 · No fix listed CWE-89
Priority HIGH 75
Hospital Management System v1.0 is vulnerable to SQL Injection.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00681 · Published 2023-01-13 · No fix listed CWE-89
Priority MEDIUM 60
In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.18716 · Published 2022-05-16 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability was found in CodeAstro Hospital Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00515 · Published 2024-11-26 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in CodeAstro Hospital Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00495 · Published 2024-11-26 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in CodeAstro Hospital Management System 1.0 and classified as problematic.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00495 · Published 2024-11-26 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00614 · Published 2024-11-25 · No fix listed CWE-284
Priority MEDIUM 53
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07749 · Published 2022-07-01 · No fix listed CWE-89
Priority MEDIUM 51
Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters on the Login page.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06223 · Published 2022-09-13 · No fix listed CWE-89
Priority MEDIUM 47
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02955 · Published 2022-05-03 · No fix listed CWE-89
Priority MEDIUM 46
Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01909 · Published 2022-05-11 · No fix listed CWE-434
Priority MEDIUM 46
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01881 · Published 2022-03-31 · No fix listed CWE-434
Priority MEDIUM 46
A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02208 · Published 2022-05-31 · No fix listed CWE-89
Priority MEDIUM 46
SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01793 · Published 2021-08-16 · No fix listed CWE-89
Priority MEDIUM 45
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orders.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01583 · Published 2022-07-01 · No fix listed CWE-89
Priority MEDIUM 45
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01551 · Published 2022-07-01 · No fix listed CWE-89
Priority MEDIUM 45
In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01608 · Published 2022-05-26 · No fix listed CWE-89
Priority MEDIUM 45
Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in room.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01673 · Published 2022-05-11 · No fix listed CWE-89
Priority MEDIUM 45
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the delid parameter at viewtreatmentrecord.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01608 · Published 2022-05-15 · No fix listed CWE-89
Priority MEDIUM 45
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01442 · Published 2022-05-04 · No fix listed CWE-89
Priority MEDIUM 45
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01575 · Published 2022-04-26 · No fix listed CWE-89
Priority MEDIUM 45
HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01608 · Published 2022-03-15 · No fix listed CWE-89
Priority MEDIUM 45
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01608 · Published 2022-03-15 · No fix listed CWE-89
Priority MEDIUM 45
HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01575 · Published 2022-02-23 · No fix listed CWE-89
Load more
THREATIST.IORead the docs