PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs.
CPE | Name | Operator | Version |
---|---|---|---|
hospital_management_system | eq | 4.0 |