CVE-2022-25403

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php...

CVE-2022-25402

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

CVE-2022-25403

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php...

CVE-2022-25402

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

CVE-2022-25403

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php...

Improper access control

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

Sql injection

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php...

CVE-2022-25403

CVE-2022-25403 affects HMS v1.0, with a SQL injection vulnerability in the admin.php component. The issue stems from inadequate handling/validation of user input in admin.php, allowing injection of arbitrary SQL statements. Reported impact in CVSS indicates high severity with partial confidential...

CVE-2022-25403

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php...

CVE-2022-25402

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

CVE-2022-25402

CVE-2022-25402 describes an improper access-control flaw in HMS v1.0 that allows unauthenticated attackers to read and modify all PHP files. The root cause is an incorrect access-control mechanism that fails to limit access to sensitive PHP assets. Affected product: HMS v1.0 (as per multiple sour...

CVE-2022-23366

HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php...

CVE-2022-23364

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

CVE-2022-23364

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

CVE-2022-23365

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

CVE-2022-23364

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

CVE-2022-23365

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

Sql injection

HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php...

Sql injection

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

Sql injection

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...