CVE-2020-26627

2024-01-1000:00:00

mitre

www.cve.org

cve-2020-26627

sql injection

hospital management system

database dump

admin remark

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

19.2%

JSON

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the ‘Admin Remark’ parameter under the ‘Contact Us Queries -> Unread Query’ tab.