Vulnerabilities

TI-2024-10824 CVE-2024-11678 · GHSA-j8p2-5922-rxpr

CodeAstro Hospital Management System his_doc_register_patient.php cross site scripting

MEDIUM 57

A vulnerability was found in CodeAstro Hospital Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00515 Published 2024-11-26 No fix listed CWE-79

TI-2024-10823 CVE-2024-11677 · GHSA-mx67-gpgv-qm6w

CodeAstro Hospital Management System Add Vendor Details Page his_admin_add_vendor.php cross site scripting

MEDIUM 57

A vulnerability was found in CodeAstro Hospital Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00495 Published 2024-11-26 No fix listed CWE-79

TI-2024-10822 CVE-2024-11676 · GHSA-h8jw-v8m2-669r

CodeAstro Hospital Management System Add Laboratory Equipment Page his_admin_add_lab_equipment.php cross site scripting

MEDIUM 57

A vulnerability was found in CodeAstro Hospital Management System 1.0 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00495 Published 2024-11-26 No fix listed CWE-79

TI-2024-10820 CVE-2024-11674 · GHSA-x6vf-7crv-fr5w

CodeAstro Hospital Management System his_doc_update-account.php unrestricted upload

MEDIUM 57

A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00614 Published 2024-11-25 No fix listed CWE-284

TI-2023-23566 CVE-2023-43909 · GHSA-wwqq-8q2m-2xgv

Hospital Management System thru commit 4770d was discovered to contain a SQL injection…

HIGH 80

Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00809 Published 2023-09-29 No fix listed CWE-89

TI-2023-03865 CVE-2023-4176 · GHSA-3c3x-89f2-9xg4

SourceCodester Hospital Management System appointmentapproval.php sql injection

MEDIUM 44

A vulnerability was found in SourceCodester Hospital Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00827 Published 2023-08-06 No fix listed CWE-89

TI-2023-03562 CVE-2023-3811 · GHSA-9v29-qg66-4cr7

Hospital Management System patientprofile.php sql injection

MEDIUM 43

A vulnerability was found in Hospital Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00726 Published 2023-07-21 No fix listed CWE-89

TI-2023-03561 CVE-2023-3810 · GHSA-hc6g-965f-8v9w

Hospital Management System patientappointment.php sql injection

MEDIUM 43

A vulnerability was found in Hospital Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00726 Published 2023-07-21 No fix listed CWE-89

TI-2023-03560 CVE-2023-3809 · GHSA-fhc2-947f-pw8v

Hospital Management System patient.php sql injection

MEDIUM 43

A vulnerability was found in Hospital Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00726 Published 2023-07-21 No fix listed CWE-89

TI-2023-03559 CVE-2023-3808 · GHSA-6wfh-2cg6-c5wc

Hospital Management System patientforgotpassword.php sql injection

LOW 39

A vulnerability was found in Hospital Management System 1.0 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00717 Published 2023-07-21 No fix listed CWE-89

TI-2023-17361 CVE-2023-34651 · GHSA-hp3r-4gxv-f647

PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).

LOW 28

PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00493 Published 2023-06-28 No fix listed CWE-79

TI-2022-23817 CVE-2022-48120 · GHSA-jhx2-qrv5-m4q7

SQL Injection vulnerability in kishan0725 Hospital Management System thru commit…

HIGH 82

SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd (on March 13, 2021), allows attackers to execute arbitrary commands via the contact and doctor par…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0088 Published 2023-01-20 No fix listed CWE-89

TI-2022-22763 CVE-2022-46093 · GHSA-fh83-fh6p-94qw

Hospital Management System v1.0 is vulnerable to SQL Injection.

HIGH 75

Hospital Management System v1.0 is vulnerable to SQL Injection.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00681 Published 2023-01-13 No fix listed CWE-89

TI-2022-18178 CVE-2022-38637 · GHSA-rm29-qf4c-w4xx

Hospital Management System v1.0 was discovered to contain multiple SQL injection…

MEDIUM 51

Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters on the Login page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06223 Published 2022-09-13 No fix listed CWE-89

TI-2022-15429 CVE-2022-34590 · GHSA-v63h-gfjw-j838

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 40

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in /HMS/admin.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.05336 Published 2022-07-20 No fix listed CWE-89

TI-2022-13855 CVE-2022-32095 · GHSA-8fhq-w2g2-8jw6

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 45

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orders.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01583 Published 2022-07-01 No fix listed CWE-89

TI-2022-13854 CVE-2022-32094 · GHSA-vqvr-2j5x-jr4h

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 53

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07749 Published 2022-07-01 No fix listed CWE-89

TI-2022-13853 CVE-2022-32093 · GHSA-ph9w-qjq9-57qq

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 45

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01551 Published 2022-07-01 No fix listed CWE-89

TI-2021-19821 CVE-2021-44095 · GHSA-rj26-hjhh-wrpr

A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php…

MEDIUM 46

A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02208 Published 2022-05-31 No fix listed CWE-89

TI-2022-12674 CVE-2022-30516 · GHSA-9xjm-h68j-x49g

In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks.

MEDIUM 45

In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2022-05-26 No fix listed CWE-89

TI-2022-12344 CVE-2022-30012 · GHSA-h8p9-8p5m-2m7h

In the POST request of the appointment.php page of HMS v.0, there are SQL injection…

LOW 36

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01772 Published 2022-05-16 No fix listed CWE-89

TI-2022-12343 CVE-2022-30011 · GHSA-p73c-xh59-98jx

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability.

MEDIUM 60

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18716 Published 2022-05-16 No fix listed CWE-89

TI-2022-11535 CVE-2022-28929 · GHSA-hw5v-vjxm-9hpj

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 45

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the delid parameter at viewtreatmentrecord.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2022-05-15 No fix listed CWE-89

TI-2022-12630 CVE-2022-30449 · GHSA-j279-9hf3-534v

Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a…

MEDIUM 45

Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in room.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01673 Published 2022-05-11 No fix listed CWE-89

TI-2022-12629 CVE-2022-30448 · GHSA-m83p-2xxp-x33x

Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a…

MEDIUM 46

Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01909 Published 2022-05-11 No fix listed CWE-434

Vulnerabilities

Filters