CVE-2024-23747

CVE-2024-23747 Moderna Sistemas ModernaNet 병원 관리 시스템 2024는 안전하지 않은 직접 객체 참조IDOR 취약점에 영향을 받습니다. PoC 이 취약점은 /Modernanet/LAUDO/LAU0000100/Laudo?id= URL을 통한 사용자 데이터 접근 처리에 존재합니다. 이 id 매개변수를 조작함으로써 공격자는 민감한 의료 정보에 접근할 수 있습니다. http://IP/Modernanet/LAUDO/LAU0000100/Laudo?id=NUMBER 결과를 보기 위해 로그인할 필요가 없습니...

PHPGurukul Hospital Management System 4.0 - SQL Injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain sensitive database information. id: CVE-2020-22165 info: name: PHPGurukul Hospital Management System 4.0 - SQL Injection...

Hospital Management System 1.0 - Cross-Site Scripting

Hospital Management System 1.0 contains a cross-site scripting vulnerability via the searchdata parameter in doctor/search.php and patient-search.php. id: CVE-2021-39411 info: name: Hospital Management System 1.0 - Cross-Site Scripting author: arafatansari severity: high description: | Hospital...

CVE-2022-27413

Hospital-Management-System v1.0 - SQLi 공급업체 설명: 취약점 페이지는 admin.php입니다. http://you ip/HMS/admin.php Hospital-Management-System v1.0 admin.php 페이지의 adminname 매개변수는 SQL 인젝션 공격에 취약한 것으로 보입니다. +sqlmap: python3 sqlmap.py -r Your post packet.txt --random-agent --risk=3 --level=3 -dbs + 페이로드: Parameter:...

Hospital Management System 4.0 - SQL Injection

Hospital Management System 4.0 contains multiple SQL injection vulnerabilities because multiple pages and parameters do not validate user input. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of...

PHPGurukul Hospital Management System - Cross-Site Scripting

PHPGurukul Hospital Management System in PHP 4.0 contains multiple cross-site scripting vulnerabilities. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2020-5191 info: name: PHPGurukul Hospital Management System -...

Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/doctor.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/admin.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

CVE-2023-7173

CVE-2023-7173: 病院管理システムにおける格納型クロスサイトスクリプティング（XSS） 脆弱性の詳細 CVE ID: CVE-2023-7173 脆弱性の種類: 格納型XSS 影響を受けるコンポーネント: ユーザーログインページ 脆弱なパラメータ: Fullname ベンダー情報: phpgurukul.com 影響を受けるバージョン: Hospital Management System 1.0 脆弱性の説明...

CVE-2023-7172

CVE-2023-7172 概要 このプロジェクトには、SQLインジェクション（CVE-2023-7172）の影響を受けやすい病院管理システム（HMS）の脆弱性のあるバージョンが含まれています。SQLインジェクションは、システムのセキュリティと機能に深刻な影響を与える可能性がある重大なWebアプリケーションの脆弱性です。 CVEの詳細 CVE ID: CVE-2023-7172 脆弱性の種類: SQLインジェクション 影響を受けるコンポーネント: 管理者ログインページ 脆弱なパラメータ: username ベンダー情報: phpgurukul.com 脆弱なバージョン: Hospital...

Zero-Day-Legacy

🎓 卒業プロジェクト — Ajloun National University ANU IT学部 · サイバーセキュリティ＆クラウドコンピューティング · 2026年度 🏆 大学最高評価：97% 📖 概要 Zero-Day Legacy は、Ajloun National University の卒業プロジェクトとして構築された、現実的で意図的に脆弱性を持たせた Boot-to-Root CTF（Capture The Flag） ラボマシンです。複数の脆弱性クラスにわたる完全な実世界の攻撃チェーンを包含する、Royal Health Hospital という病院管理システ...

CVE-2026-82914

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2026-82914

kishan0725 Hospital-Management-System 1.0 contains a SQL injection vulnerability in the file /search.php , triggered by manipulation of the Contact argument. The flaw allows a remote, unauthenticated attacker to execute arbitrary SQL queries, resulting in low impact on confidentiality, integrity,...

CVE-2026-82914 kishan0725 Hospital-Management-System search.php sql injection

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2026-82914 kishan0725 Hospital-Management-System search.php sql injection

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

EUVD-2026-68807

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2026-82914: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

PT-2026-84033

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital-Management-System version 1.0 Description A security flaw allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application makes to its database. The issue exists in the...

CVE-2026-78112

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2026-78112 itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...