CVE-2022-32340

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=patients/viewpatient=...

CVE-2022-32340

creationtimestamp| type| source ---|---|--- 2022-06-14 20:18:09+00:00| seen| https://t.me/cibsecurity/44420...

CVE-2022-32340

CVE-2022-32340 affects Sourcecodester Hospital Patient Records Management System (HPRMS) v1.0. A SQL Injection flaw is exposed in the admin page, specifically /hprms/admin/?page=patients/view_patient&id=, caused by insufficient input validation. This allows attackers to manipulate SQL queries, po...