Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-07578
HistoryNov 18, 2022 - 12:00 a.m.

Hospital Management Center SQL Injection Vulnerability

2022-11-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
hospital management center
sql injection
patient-info.php
validation
external input
sensitive data

0.002 Low

EPSS

Percentile

54.0%

Hospital Management Center is a web system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. hospital Management Center is vulnerable to a SQL injection vulnerability that originates in an unknown function in the file patient-info.php Lack of validation of external input SQL statements for the parameter pt_id. An attacker could exploit the vulnerability to execute illegal SQL commands to steal sensitive database data.

0.002 Low

EPSS

Percentile

54.0%

Related for CNVD-2023-07578