Lucene search

K
cveMitreCVE-2020-26629
HistoryJan 10, 2024 - 9:15 a.m.

CVE-2020-26629

2024-01-1009:15:43
CWE-434
mitre
web.nvd.nist.gov
21
cve
2020
26629
hospital management system
jquery
unrestricted
arbitrary file upload
nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.003

Percentile

68.1%

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker to upload any file to the server.

Affected configurations

Nvd
Node
phpgurukulhospital_management_systemMatch4.0
VendorProductVersionCPE
phpgurukulhospital_management_system4.0cpe:2.3:a:phpgurukul:hospital_management_system:4.0:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.003

Percentile

68.1%

Related for CVE-2020-26629