CVE-2022-30012

2022-05-1612:51:32

mitre

www.cve.org

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%

JSON

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection.

References

github.com/kabirkhyrul/HMS/discussions/15

github.com/kabirkhyrul/HMS/tree/1.0