Page 13 of 87 results (0.007 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-30448

https://notcve.org/view.php?id=CVE-2022-30448

Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php. Se ha detectado que Hospital Management System in PHP with Source Code (HMS) versión 1.0, contiene una vulnerabilidad de carga de archivos en el archivo treatmentrecord.php • https://www.yuque.com/docs/share/43407f5b-a831-4598-9648-5af9f780b12a • CWE-434: Unrestricted Upload of File with Dangerous Type •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-27420

https://notcve.org/view.php?id=CVE-2022-27420

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php. Se ha detectado que Hospital Management System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del parámetro patient_contact en el archivo patientsearch.php • https://github.com/kishan0725/Hospital-Management-System/issues/19 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 2

CVE-2022-27413

https://notcve.org/view.php?id=CVE-2022-27413

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php. Se ha detectado que Hospital Management System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del parámetro adminname en el archivo admin.php • https://github.com/HH1F/CVE-2022-27413 https://github.com/HH1F/Hospital-Management-System-V1.0-SQLi • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-27299

https://notcve.org/view.php?id=CVE-2022-27299

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php. Se ha detectado que Hospital Management System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del componente room.php • https://github.com/kabirkhyrul/HMS/discussions/14 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-26546

https://notcve.org/view.php?id=CVE-2022-26546

Hospital Management System v1.0 was discovered to lack an authorization component, allowing attackers to access sensitive information and obtain the admin password. Se ha detectado que Hospital Management System versión v1.0, carece de un componente de autorización, lo que permite a atacantes acceder a información confidencial y obtener la contraseña de administrador • https://github.com/kabirkhyrul/HMS https://github.com/kabirkhyrul/HMS/discussions/12 • CWE-862: Missing Authorization •