CVE-2024-11676

CVE-2024-11676 affects CodeAstro Hospital Management System 1.0. Affected component: /backend/admin/his_admin_add_lab_equipment.php. The vulnerability arises from manipulation of the parameters eqp_code, eqp_name, eqp_vendor, eqp_desc, eqp_dept, eqp_status, and eqp_qty, leading to cross-site scri...

CVE-2024-11676 CodeAstro Hospital Management System Add Laboratory Equipment Page his_admin_add_lab_equipment.php cross site scripting

A vulnerability was found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /backend/admin/hisadminaddlabequipment.php of the component Add Laboratory Equipment Page. The manipulation of the argument...

CVE-2024-11674

A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0. Affected is an unknown function of the file /backend/doc/hisdocupdate-account.php. The manipulation of the argument docdpic leads to unrestricted upload. It is possible to launch the attack...

CVE-2024-11675 CodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting

A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /backend/admin/hisadminregisterpatient.php of the component Add Patient Details Page. The manipulation of the argument...

CVE-2024-11675

CVE-2024-11675 affects CodeAstro Hospital Management System (v1.0). The vulnerability resides in the file /backend/admin/his_admin_register_patient.php (Add Patient Details Page), where inputs for pat_fname, pat_ailment, pat_lname, pat_age, pat_dob, pat_number, pat_phone, pat_type, and pat_addr c...

CVE-2024-11675 CodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting

A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /backend/admin/hisadminregisterpatient.php of the component Add Patient Details Page. The manipulation of the argument...

CVE-2024-11674: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0. Affected is an unknown function of the file /backend/doc/hisdocupdate-account.php. The manipulation of the argument docdpic leads to unrestricted upload. It is possible to launch the attack...

CVE-2024-11678: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /backend/doc/hisdocregisterpatient.php. The manipulation of the argument...

CVE-2024-11675: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /backend/admin/hisadminregisterpatient.php of the component Add Patient Details Page. The manipulation of the argument...

CVE-2024-11676: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /backend/admin/hisadminaddlabequipment.php of the component Add Laboratory Equipment Page. The manipulation of the argument...

CVE-2024-11677: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /backend/admin/hisadminaddvendor.php of the component Add Vendor Details Page. The manipulation of the argument...

CVE-2024-11674

CodeAstro Hospital Management System 1.0 is affected by CVE-2024-11674 due to an unrestricted file upload in the /backend/doc/his_doc_update-account.php function when manipulating the doc_dpic parameter. The vulnerability can be triggered remotely, and public exploitation details have been disclo...

CVE-2024-11674 CodeAstro Hospital Management System his_doc_update-account.php unrestricted upload

A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0. Affected is an unknown function of the file /backend/doc/hisdocupdate-account.php. The manipulation of the argument docdpic leads to unrestricted upload. It is possible to launch the attack...