Vulnerabilities

Filters

Reset all

2 selected

62 records

Sort

Vendor: PHPGurukul Component: Hospital Management System Clear all filters

TI-2025-43014 CVE-2025-70064 · GHSA-wjf9-j9vw-27f4

PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability.

HIGH 73

PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00541 Published 2026-02-18 No fix listed CWE-284

TI-2025-43013 CVE-2025-70063 · GHSA-8gfj-223w-87pr

The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an…

MEDIUM 62

The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference (IDOR) vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00382 Published 2026-02-18 No fix listed CWE-639

TI-2025-43012 CVE-2025-70062 · GHSA-2hcf-jfqx-g286

PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF)…

MEDIUM 62

PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the 'Add Doctor' module.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00202 Published 2026-02-18 No fix listed CWE-352

TI-2026-01828 CVE-2026-2179 · GHSA-h7p7-f8wc-8xvh

PHPGurukul Hospital Management System manage-users.php sql injection

MEDIUM 56

A vulnerability was determined in PHPGurukul Hospital Management System 4.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00366 Published 2026-02-08 No fix listed CWE-74

TI-2026-01784 CVE-2026-2134 · GHSA-hgh5-fxqq-8cf2

PHPGurukul Hospital Management System manage-doctors.php sql injection

MEDIUM 56

A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00364 Published 2026-02-08 No fix listed CWE-74

TI-2026-01239 CVE-2026-1550 · GHSA-457r-j4jw-r8c4

PHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorization

LOW 24

A security flaw has been discovered in PHPGurukul Hospital Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00397 Published 2026-01-28 No fix listed CWE-266

TI-2025-35273 CVE-2025-56216 · GHSA-7xr7-rggp-w8mq

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter.

HIGH 70

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00286 Published 2025-08-25 No fix listed CWE-89

TI-2025-35272 CVE-2025-56215 · GHSA-gcwm-ghw7-8j7v

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter.

LOW 36

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00266 Published 2025-08-25 No fix listed CWE-89

TI-2025-35271 CVE-2025-56214 · GHSA-58fw-grv9-c5qh

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username parameter.

MEDIUM 49

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00351 Published 2025-08-25 No fix listed CWE-89

TI-2025-35270 CVE-2025-56212 · GHSA-m8vx-35ch-843v

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter.

MEDIUM 49

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00433 Published 2025-08-25 No fix listed CWE-89

TI-2025-06941 CVE-2025-7604 · GHSA-5jxm-crh2-g4cj

PHPGurukul Hospital Management System user-login.php sql injection

HIGH 70

A vulnerability was found in PHPGurukul Hospital Management System 4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00469 Published 2025-07-14 No fix listed CWE-74

TI-2025-06538 CVE-2025-7176 · GHSA-c63j-hm8q-jpfj

PHPGurukul Hospital Management System view-medhistory.php sql injection

HIGH 70

A vulnerability was found in PHPGurukul Hospital Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00691 Published 2025-07-08 No fix listed CWE-74

TI-2024-34337 CVE-2024-51360 · GHSA-m537-88r7-p568

An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute…

HIGH 82

An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute arbitrary code via the hms/doctor/edit-profile.php file

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00992 Published 2025-05-23 No fix listed CWE-94

TI-2024-37739 CVE-2024-56998 · GHSA-2f47-g943-j472

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in…

MEDIUM 53

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /edit-profile.php via the parameter $address.

CVSS 3.1MEDIUM 4.2 Local High privileges No interaction EPSS 0.00205 Published 2025-01-21 No fix listed CWE-79

TI-2024-37738 CVE-2024-56997 · GHSA-qwp3-qccp-m6pg

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in…

MEDIUM 53

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /doctor/index.php via the 'Email' parameter.

CVSS 3.1MEDIUM 4.2 Local High privileges No interaction EPSS 0.00205 Published 2025-01-21 No fix listed CWE-79

TI-2024-37737 CVE-2024-56990 · GHSA-qpr8-gfg5-hxvp

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in…

MEDIUM 54

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /view-medhistory.php and /admin/view-patient.php.

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.00408 Published 2025-01-21 No fix listed CWE-79

TI-2024-10821 CVE-2024-11675 · GHSA-rwvw-fh44-w2r2

CodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting

MEDIUM 57

A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00515 Published 2024-11-26 No fix listed CWE-79

TI-2024-30904 CVE-2024-46239 · GHSA-88vp-fx5v-pxw6

Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management…

MEDIUM 60

Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00301 Published 2024-10-21 No fix listed CWE-79

TI-2024-30903 CVE-2024-46238 · GHSA-23wv-w3v2-hcrj

Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital…

MEDIUM 60

Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00301 Published 2024-10-21 No fix listed CWE-79

TI-2024-30902 CVE-2024-46237 · GHSA-7pfh-f4vj-ww8f

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via…

MEDIUM 58

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and medhis parameters in doctor/add-patient.php and doctor/edit-patient.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00317 Published 2024-10-09 No fix listed CWE-79

TI-2022-22981 CVE-2022-46499 · GHSA-8c44-wv8g-r976

Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 41

Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00547 Published 2024-03-07 No fix listed CWE-89

TI-2022-22980 CVE-2022-46498 · GHSA-2mgj-rr5x-hxrj

Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 47

Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the doc_number parameter at his_admin_view_single_employee.php.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00443 Published 2024-03-07 No fix listed CWE-89

TI-2022-22979 CVE-2022-46497 · GHSA-hvp8-96r6-cvmc

Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability…

LOW 38

Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_doc_view_single_patien.php.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.005 Published 2024-03-07 No fix listed CWE-89

TI-2024-00331 CVE-2024-0364 · GHSA-hqww-89rm-qcrf

PHPGurukul Hospital Management System query-details.php sql injection

MEDIUM 43

A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00535 Published 2024-01-10 No fix listed CWE-89

TI-2024-00330 CVE-2024-0363 · GHSA-237h-73gr-5r5j

PHPGurukul Hospital Management System patient-search.php sql injection

HIGH 76

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00649 Published 2024-01-10 No fix listed CWE-89