Page 2 of 34 results (0.005 seconds)

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-42205

https://notcve.org/view.php?id=CVE-2022-42205

21 Oct 2022 — PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via add-patient.php. PHPGurukul Hospital Management System In PHP versión V4.0, es vulnerable a un ataque de tipo Cross Site Scripting (XSS) por medio del archivo add-patient.php • https://sisl.lab.uic.edu/projects/chess/cross-site-scripting-in-hms2 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-42206

https://notcve.org/view.php?id=CVE-2022-42206

21 Oct 2022 — PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php. PHPGurukul Hospital Management System In PHP versión V4.0, es vulnerable a un ataque de tipo Cross Site Scripting (XSS) por medio de los archivos doctor/view-patient.php, admin/view-patient.php, y view-medhistory.php • https://sisl.lab.uic.edu/projects/chess/cross-site-scripting-in-hms3 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2

CVE-2022-24226

https://notcve.org/view.php?id=CVE-2022-24226

15 Feb 2022 — Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php. Se ha detectado que Hospital Management System versión v4.0, contiene una vulnerabilidad de inyección SQL ciega por medio de la función register en el archivo func2.php • https://github.com/Nguyen-Trung-Kien/CVE • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 3

CVE-2022-24646

https://notcve.org/view.php?id=CVE-2022-24646

10 Feb 2022 — Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/contact.php via the txtMsg parameters. Se ha detectado que Hospital Management System versión v4.0, contiene una vulnerabilidad de inyección SQL en el archivo /Hospital-Management-System-master/contact.php por medio de los parámetros txtMsg • https://github.com/kishan0725/Hospital-Management-System/issues/18 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 9.8EPSS: 2%CPEs: 1EXPL: 6

CVE-2022-24263 – Hospital Management System 4.0 - 'multiple' SQL Injection

https://notcve.org/view.php?id=CVE-2022-24263

31 Jan 2022 — Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter. Se ha detectado que Hospital Management System versión v4.0, contiene una vulnerabilidad de inyección SQL en el componente /Hospital-Management-System-master/func.php por medio del parámetro email Hospital Management System version 4.0 suffers from multiple remote SQL injection vulnerabilities. Original discovered of SQL injection in this version is ... • https://packetstorm.news/files/id/165882 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 6.1EPSS: 5%CPEs: 1EXPL: 0

CVE-2021-39411

https://notcve.org/view.php?id=CVE-2021-39411

05 Nov 2021 — Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the (1) searchdata parameter in (a) doctor/search.php and (b) admin/patient-search.php, and the (2) fromdate and (3) todate parameters in admin/betweendates-detailsreports.php. Se presentan múltiples vulnerabilidades de tipo Cross Site Scripting (XSS) en PHPGurukul Hospital Management System versión 4.0, por medio del parámetro (1) searchdata en (a) el archivo doctor/search.php y (b) admin/patient-sear... • https://sisl.lab.uic.edu/projects/chess/hmsp • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 1

CVE-2020-22176

https://notcve.org/view.php?id=CVE-2020-22176

22 Jun 2021 — PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas. Remote unauthenticated users can exploit the vulnerability to obtain user sensitive information. PHPGurukul Hospital Management System en PHP versión v4.0, presenta una vulnerabilidad de divulgación de información confidencial en múltiples áreas. Los usuarios no autentificados remoto pueden explotar la vulnerabilidad para obtener información confidencial del usuario • https://github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cve • CWE-287: Improper Authentication CWE-862: Missing Authorization •

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 1

CVE-2020-22170

https://notcve.org/view.php?id=CVE-2020-22170

22 Jun 2021 — PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information. PHPGurukul Hospital Management System en PHP versión v4.0, presenta una vulnerabilidad de inyección SQL en el archivo \hms\get_doctor.php. Los usuarios no autentificados remoto pueden explotar la vulnerabilidad para obtener información confidencial de la base de datos • https://github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cve • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 1

CVE-2020-22164

https://notcve.org/view.php?id=CVE-2020-22164

22 Jun 2021 — PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_availability.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information. PHPGurukul Hospital Management System en PHP versión v4.0, presenta una vulnerabilidad de inyección SQL en el archivo \hms\check_availability.php. Los usuarios remoto no autentificados pueden explotar la vulnerabilidad para obtener información confidencial de la base de datos • https://github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cve • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 1

CVE-2020-22165

https://notcve.org/view.php?id=CVE-2020-22165

22 Jun 2021 — PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information. PHPGurukul Hospital Management System en PHP versión v4.0, presenta una vulnerabilidad de inyección SQL en el archivo \hms\user-login.php. Los usuarios no autentificados remoto pueden explotar la vulnerabilidad para obtener información confidencial de la base de datos • https://github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cve • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •