3 matches found
Hospital Management System 1.0 - SQL Injection Detection
Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/admin.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. !/usr/bin/e...
PT-2022-22222
Name of the Vulnerable Software and Affected Versions Hospital Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the editid parameter in the "/HMS/admin.php" API endpoint. Recommendations For Hospital Managemen...
CVE-2022-34590: Improper Neutralization of Special Elements used in an SQL Command
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in /HMS/admin.php...