CVE-2026-15536: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /patviewprescription.php. The manipulation of the argument delid leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and mig...

CVE-2024-11678

CodeAstro Hospital Management System 1.0 is affected by a cross-site scripting vulnerability in /backend/doc/his_doc_register_patient.php. The issue arises from manipulating the parameters pat_fname, pat_ailment, pat_lname, pat_age, pat_dob, pat_number, pat_phone, pat_type, and pat_addr, allowing...

CVE-2024-11677

CVE-2024-11677 concerns CodeAstro Hospital Management System 1.0. The vulnerability affects the Add Vendor Details Page, specifically the file path /backend/admin/his_admin_add_vendor.php, where manipulation of the parameters v_name, v_adr, v_number, v_email, v_phone, and v_desc can trigger a cro...

CVE-2024-11102

CVE-2024-11102 affects SourceCodester Hospital Management System 1.0. The vulnerability resides in the file /vm/doctor/edit-doc.php, where manipulation of the name parameter enables cross-site scripting. Exploitation can be performed remotely, and multiple parameters may be affected. Public discl...

CVE-2024-8944

A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part of the file checkavailability.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2024-8368

A vulnerability was found in code-projects Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched...

Sql injection

Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisadminviewsinglepatient.php...

CVE-2022-46499

Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisadminviewsinglepatient.php...

Sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. The exploit has been...

Exploit for SQL Injection in Phpgurukul Hospital_Management_System

CVE-2023-7172 Overview This project contains a vulnerabl...

CVE-2023-7172

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...