CVE-2024-37802

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu parameter...

CVE-2024-38347

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information module via the id parameter...

Health Care hospital Management System SQL Injection Vulnerability

Health Care hospital Management System is an open source health care hospital management system from Code-Projects. A SQL injection vulnerability exists in Health Care hospital Management System v1.0, which originates from a SQL injection vulnerability in the searvalu parameter in the Staff Info...

CVE-2024-37802: Improper Neutralization of Special Elements used in an SQL Command

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu parameter...

CVE-2024-38347: Improper Neutralization of Special Elements used in an SQL Command

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information module via the id parameter...

CVE-2024-37802

The CodeProjects Health Care hospital Management System v1.0 is vulnerable to a SQL injection vulnerability within the Patient Info module . The flaw is triggered via the searvalu parameter. While the technical impact is significant, there is no specific patch currently available. To mitigate ris...

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 contains a SQL injection vulnerability in the Staff Info module reachable via the searvalu parameter. The issue is documented across multiple sources (NVD, CVE list, CNNVD, PT-Security, etc.) with the vulnerability impacting the Staff Info ...

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...

PT-2024-27761

Name of the Vulnerable Software and Affected Versions CodeProjects Health Care hospital Management System version 1.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page. This ...

CVE-2024-37803: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page...

CVE-2024-38348: Improper Neutralization of Special Elements used in an SQL Command

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...