Lucene search
MitreCVE-2021-35387HistoryOct 28, 2022 - 3:15 p.m.
CVE-2021-35387
2022-10-2815:15:12
CWE-89
mitre
web.nvd.nist.gov
31
3
cve-2021-35387
hospital management system
sql injection
nvd
view patient
vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.001
Percentile
37.7%
Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php.
Affected configurations
Node
phpgurukulhospital_management_systemMatch4.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpgurukul | hospital_management_system | 4.0 | cpe:2.3:a:phpgurukul:hospital_management_system:4.0:*:*:*:*:*:*:* |
References
Social References
More
Related
nvd
nvd
CVE-2021-35387
2022-10-28 15:15:12
cvelist
cvelist
CVE-2021-35387
2022-10-28 00:00:00
prion
prion
Sql injection
2022-10-28 15:15:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.001
Percentile
37.7%
Related for CVE-2021-35387