CVE-2025-5224: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/add-doctor.php. The manipulation of the argument Doctorspecialization leads to sql injection. It is possible to launch the attack remotely...

CVE-2024-10350: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...

PT-2024-31929

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System version 4.0 Description The issue concerns multiple Cross Site Scripting XSS vulnerabilities. These vulnerabilities exist in the PHPGurukul Hospital Management System via the docname parameter in...

CVE-2024-46238: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php...