1 matches found
CVE-2020-26630: Improper Neutralization of Special Elements used in an SQL Command
A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a special payload in the 'Doctor Specialization' field under the 'Go to Doctors' tab after logging in as an admin...
4.9CVSS6.5AI score0.00707EPSS
SaveExploits3References3
20