21 matches found
CVE-2026-19069 itsourcecode Hospital Management System treatmentrecord.php sql injection
A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...
PT-2026-68675
Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A remote SQL injection is possible via the /treatmentrecord.php endpoint. The issue occurs when the editid argument is manipulated, allowing an attacker to execute arbitrary SQL...
CVE-2026-19069: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...
EUVD-2022-30162
Malicious code in bioql PyPI...
CVE-2022-30448: Unrestricted Upload of File with Dangerous Type
Hospital Management System in PHP with Source Code HMS 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php...
PT-2022-20115
Name of the Vulnerable Software and Affected Versions Hospital Management System in PHP with Source Code HMS version 1.0 Description The issue is related to a File upload vulnerability found in the treatmentrecord.php file. This vulnerability could potentially allow unauthorized file uploads...
CVE-2022-24136
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
Design/Logic Flaw
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
CVE-2022-24136
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
CVE-2022-24136
CVE-2022-24136 affects Hospital Management System v1.0 and involves an unrestricted file upload in treatmentrecord.php . An attacker can upload a PHP file and remotely execute code, enabling arbitrary code execution. Multiple connected sources (CNVD-2022-81375, NVD, Red Hat, CNVD variants) corrob...
CVE-2022-24136
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
CVE-2022-24136: Unrestricted Upload of File with Dangerous Type
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
PT-2022-16487
Name of the Vulnerable Software and Affected Versions Hospital Management System version 1.0 Description The issue concerns an unrestricted upload of dangerous file types in the treatmentrecord.php file. An attacker can exploit this by uploading any PHP file and then executing it. Recommendations...
CVE-2022-25493
HMS v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via treatmentrecord.php...
CVE-2022-25493
HMS v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via treatmentrecord.php...
Cross site scripting
HMS v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via treatmentrecord.php...
CVE-2022-25493
HMS v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via treatmentrecord.php...
CVE-2022-25493
HMS v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via treatmentrecord.php...
CVE-2022-25493: Improper Neutralization of Input During Web Page Generation
HMS v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via treatmentrecord.php...
HMS 跨站脚本漏洞
HMS is a computer or web based hospital management system in Bangladesh. Useful for managing the operations of a hospital or any healthcare facility.HMS version 1.0 has a cross-site scripting vulnerability that can be exploited by attackers to cause a reflected cross-site scripting XSS...