PT-2022-21249

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/rooms/view room.php endpoint, specifically through the id parameter. Recommendation...

PT-2022-21245

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "/hprms/admin/room types/view room type.php?id=" endpoint, where the id variable is vulnerable. There is no...

PT-2022-21244

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/?page=user/manage user&id= endpoint. The id variable is vulnerable to SQL injection...

PT-2022-21243

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue is related to SQL Injection via the /hprms/admin/?page=patients/view patient&id= endpoint. This allows for potential unauthorized access to patient records. No...

PT-2022-21242

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/doctors/view doctor.php endpoint, specifically through the id parameter...

PT-2022-21248

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/rooms/manage room.php endpoint, specifically through the id parameter...

PT-2022-21246

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the hprms/admin/room types/manage room type.php endpoint, specifically through the id parameter. No...

PT-2022-21241

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/doctors/manage doctor.php endpoint, specifically through the id parameter...

PT-2022-21240

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/hprms/admin/patients/manage patient.php" endpoint, specifically affecting the id parameter. This vulnerability allo...

CVE-2022-32342: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/roomtypes/viewroomtype.php?id=...

CVE-2022-32340: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=patients/viewpatient&id=...

CVE-2022-32343: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via hprms/admin/roomtypes/manageroomtype.php?id=...

CVE-2022-32346: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/rooms/viewroom.php?id=...

CVE-2022-32341: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=user/manageuser&id=...

CVE-2022-22854: Missing Authorization

An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attackers to escalate privileges via accessing and editing the user list...

PT-2022-15712

Name of the Vulnerable Software and Affected Versions Hospital Patient Record Management System version 1.0 Description The issue is related to an access control problem in the hprms/admin/?page=user/list endpoint of the Hospital Patient Record Management System, allowing attackers to escalate...