CVE-2023-5053 – SQL Injection in hospital-management-system-in-php 378c157 in index.php
https://notcve.org/view.php?id=CVE-2023-5053
Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI. La versión 378c157 de Hospital Management System permite omitir la autenticación. Esto es posible porque la aplicación es vulnerable a SQLI. • https://fluidattacks.com/advisories/shierro https://github.com/projectworldsofficial/hospital-management-system-in-php • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVE-2023-5004 – Hospital-management-system-in-php 378c157 - Blind SQL Injection
https://notcve.org/view.php?id=CVE-2023-5004
Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI. La versión 378c157 de Hospital Management System permite omitir la autenticación. Esto es posible porque la aplicación es vulnerable a SQLI. • https://fluidattacks.com/advisories/alcocer https://github.com/projectworldsofficial/hospital-management-system-in-php • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •