CVE-2024-23747

CVE-2024-23747 Moderna Sistemas ModernaNet 医院管理系统 2024 存在不安全的直接对象引用 IDOR 漏洞。 PoC 该漏洞存在于系统通过 /Modernanet/LAUDO/LAU0000100/Laudo?id= URL 处理用户数据访问的过程中。通过操纵此 id 参数，攻击者能够获取敏感的医疗信息。 http://IP/Modernanet/LAUDO/LAU0000100/Laudo?id=NUMBER 你无需登录即可查看结果。 额外信息 由于该 IDOR 可获取到弱凭证，因此有可能利用这些凭证访问该医院的用户账户。 参考...

CVE-2022-27413

Hospital-Management-System v1.0 - SQLi 공급업체 설명: 취약점 페이지는 admin.php입니다. http://you ip/HMS/admin.php Hospital-Management-System v1.0 admin.php 페이지의 adminname 매개변수는 SQL 인젝션 공격에 취약한 것으로 보입니다...

Hospital Management System 4.0 - SQL Injection

Hospital Management System 4.0 contains multiple SQL injection vulnerabilities because multiple pages and parameters do not validate user input. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of...

Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/admin.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

PHPGurukul Hospital Management System - Cross-Site Scripting

PHPGurukul Hospital Management System in PHP 4.0 contains multiple cross-site scripting vulnerabilities. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2020-5191 info: name: PHPGurukul Hospital Management System -...

Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/doctor.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

PHPGurukul Hospital Management System 4.0 - SQL Injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain sensitive database information. id: CVE-2020-22165 info: name: PHPGurukul Hospital Management System 4.0 - SQL Injection...

Hospital Management System 1.0 - Cross-Site Scripting

Hospital Management System 1.0 contains a cross-site scripting vulnerability via the searchdata parameter in doctor/search.php and patient-search.php. id: CVE-2021-39411 info: name: Hospital Management System 1.0 - Cross-Site Scripting author: arafatansari severity: high description: | Hospital...

CVE-2023-7173

CVE-2023-7173: 병원 관리 시스템의 저장형 크로스 사이트 스크립팅XSS 취약점 취약점 세부 정보 CVE ID: CVE-2023-7173 취약점 유형: 저장형 XSS 영향을 받는 구성 요소: 사용자 로그인 페이지 취약한 매개변수: Fullname 공급업체 정보: phpgurukul.com 취약한 버전: Hospital Management System 1.0 취약점 설명 저장형 크로스 사이트 스크립팅XSS은 악성 코드를 웹사이트에 주입하고, 데이터베이스에 저장한 후, 다른 사용자가 감염된 페이지를 볼 때 실행되도록 하는...

CVE-2023-7172

CVE-2023-7172 개요 이 프로젝트는 SQL 인젝션CVE-2023-7172에 취약한 병원 관리 시스템HMS 버전을 포함하고 있습니다. SQL 인젝션은 시스템의 보안과 기능에 심각한 영향을 미칠 수 있는 중요한 웹 애플리케이션 취약점입니다. CVE 세부 정보 CVE ID: CVE-2023-7172 취약점 유형: SQL 인젝션 영향을 받는 구성 요소: 관리자 로그인 페이지 취약한 매개변수: username 공급업체 세부 정보: phpgurukul.com 취약한 버전: Hospital Management System 1.0 ...

CVE-2022-22296

CVE-2022-22296 CVE-2022-22296 に関するすべての詳細 ソフトウェア: Hospital's Patient Records Management System 1.0 ソフトウェアリンク: https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html 脆弱性タイプ: 安全でない権限 - IDOR 影響を受けるコンポーネント: id parameter in Change User Function...

Zero-Day-Legacy

🎓 Graduation Project — Ajloun National University ANU Faculty of IT · Cybersecurity and Cloud Computing · Academic Year 2026 🏆 Highest Grade in the University: 97% 📖 Overview Zero-Day Legacy is a realistic, intentionally vulnerable Boot-to-Root CTF Capture The Flag lab machine built as a graduati...

CVE-2021-41773

CVE-2021-41773 The GREENDARK hospital infrastructure was configured by Dr. Gusto Rogue prior to his termination. No further details are provided. Usage: python3 greendark.py...

CVE-2026-86302

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

CVE-2026-86301

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched...

CVE-2026-86302

CVE-2026-86302 affects code-projects Hospital Information System 1.0 , specifically the /HIS/his.sql file handled by the SQL Database Backup File Handler component. The vulnerability allows information disclosure through a remotely accessible SQL database backup file, requiring no authentication ...

CVE-2026-86302 code-projects Hospital Information System SQL Database Backup File his.sql information disclosure

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

EUVD-2026-72355

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

CVE-2026-86301

CVE-2026-86301 is a reflected Cross-Site Scripting (XSS) vulnerability in code-projects Hospital Information System 1.0 , specifically in the Patient Management component at the file /HIS/src/patients/editPatient.php. The vulnerability is triggered by manipulation of the ID argument, allowing a r...

EUVD-2026-72353

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched...