CVE-2022-25407

The CVE-2022-25407 entry corresponds to a stored cross-site scripting (XSS) vulnerability in Hospital Management System v1.0, specifically via the Doctor parameter in /admin-panel1.php. Multiple connected sources (NVD, Red Hat, PRION, CNNVD, etc.) confirm the issue, describing the root cause as a...

CVE-2022-25407

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Doctor parameter at /admin-panel1.php...

PT-2022-17270

Name of the Vulnerable Software and Affected Versions Hospital Management System version 1.0 Description The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the Doctor parameter at the "/admin-panel1.php" API endpoint. Recommendations F...

CVE-2022-25407: Improper Neutralization of Input During Web Page Generation

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Doctor parameter at /admin-panel1.php...

PHPGurukul Hospital Management System 跨站脚本漏洞

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. PHPGurukul Hospital Management System suffers from a cross-site scripting vulnerability that stems from the discovery that Hospital Management System v1.0 contains a stored cross-site scripting vulnerabilit...

CVE-2022-25003

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/viewdoctor.php...

CVE-2022-25004

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/managedoctor.php...

CVE-2022-25003

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/viewdoctor.php...

CVE-2022-25003

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/viewdoctor.php...

CVE-2022-25004

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/managedoctor.php...

Sql injection

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/viewdoctor.php...

CVE-2022-25004

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/managedoctor.php...

Sourcecodester Hospital Patient Records Management System SQL注入漏洞

Sourcecodester Hospital Patient Records Management System is a web-based application that provides an automated platform for hospitals to store and manage their patient records. sourcecodester Hospital Patient Record Management System v1.0 is vulnerable to SQL injection. The vulnerability is caus...

doctor-ho.com Cross Site Scripting vulnerability OBB-2375036

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-0483

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

Privilege escalation

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

CVE-2022-0483 Local privilege escalation due to insecure folder permissions

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

CVE-2022-0483

CVE-2022-0483 affects Acronis VSS Doctor (Windows) prior to build 53. The vulnerability is a local privilege escalation caused by insecure folder permissions, allowing a low-privileged attacker to gain higher privileges on affected systems. The NVD entry confirms the local attack vector with a CV...

PT-2022-13207

Name of the Vulnerable Software and Affected Versions Acronis VSS Doctor Windows versions prior to build 53 Description The issue is related to local privilege escalation due to insecure folder permissions. Recommendations For versions prior to build 53, update to build 53 or later to resolve the...

CVE-2022-0483: Uncontrolled Search Path Element

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...