Hospital Management System 4.0 - SQL Injection

Hospital Management System 4.0 contains multiple SQL injection vulnerabilities because multiple pages and parameters do not validate user input. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of...

Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/doctor.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

PHPGurukul Hospital Management System - Cross-Site Scripting

PHPGurukul Hospital Management System in PHP 4.0 contains multiple cross-site scripting vulnerabilities. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2020-5191 info: name: PHPGurukul Hospital Management System -...

Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/admin.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

PHPGurukul Hospital Management System 4.0 - SQL Injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain sensitive database information. id: CVE-2020-22165 info: name: PHPGurukul Hospital Management System 4.0 - SQL Injection...

Hospital Management System 1.0 - Cross-Site Scripting

Hospital Management System 1.0 contains a cross-site scripting vulnerability via the searchdata parameter in doctor/search.php and patient-search.php. id: CVE-2021-39411 info: name: Hospital Management System 1.0 - Cross-Site Scripting author: arafatansari severity: high description: | Hospital...

CVE-2024-23747

CVE-2024-23747 Moderna Sistemas ModernaNet 병원 관리 시스템 2024는 안전하지 않은 직접 객체 참조IDOR 취약점에 영향을 받습니다. PoC 이 취약점은 /Modernanet/LAUDO/LAU0000100/Laudo?id= URL을 통한 사용자 데이터 접근 처리에 존재합니다. 이 id 매개변수를 조작함으로써 공격자는 민감한 의료 정보에 접근할 수 있습니다. http://IP/Modernanet/LAUDO/LAU0000100/Laudo?id=NUMBER 결과를 보기 위해 로그인할 필요가 없습니...

CVE-2022-27413

Hospital-Management-System v1.0 - SQLi Разработчик Описание: Уязвимая страница: admin.php http://you ip/HMS/admin.php Hospital-Management-System v1.0 Параметр adminname на странице admin.php, по-видимому, уязвим для SQL-инъекций...

CVE-2023-7173

CVE-2023-7173: 병원 관리 시스템의 저장형 크로스 사이트 스크립팅XSS 취약점 취약점 세부 정보 CVE ID: CVE-2023-7173 취약점 유형: 저장형 XSS 영향을 받는 구성 요소: 사용자 로그인 페이지 취약한 매개변수: Fullname 공급업체 정보: phpgurukul.com 취약한 버전: Hospital Management System 1.0 취약점 설명 저장형 크로스 사이트 스크립팅XSS은 악성 코드를 웹사이트에 주입하고, 데이터베이스에 저장한 후, 다른 사용자가 감염된 페이지를 볼 때 실행되도록 하는...

CVE-2023-7172

CVE-2023-7172 개요 이 프로젝트는 SQL 인젝션CVE-2023-7172에 취약한 병원 관리 시스템HMS 버전을 포함하고 있습니다. SQL 인젝션은 시스템의 보안과 기능에 심각한 영향을 미칠 수 있는 중요한 웹 애플리케이션 취약점입니다. CVE 세부 정보 CVE ID: CVE-2023-7172 취약점 유형: SQL 인젝션 영향을 받는 구성 요소: 관리자 로그인 페이지 취약한 매개변수: username 공급업체 세부 정보: phpgurukul.com 취약한 버전: Hospital Management System 1.0 ...

CVE-2026-82914

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2026-82914

kishan0725 Hospital-Management-System 1.0 contains a SQL injection vulnerability in the file /search.php , triggered by manipulation of the Contact argument. The flaw allows a remote, unauthenticated attacker to execute arbitrary SQL queries, resulting in low impact on confidentiality, integrity,...

EUVD-2026-68807

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

Zero-Day-Legacy

🎓 Дипломный проект — Университет Аджлуна ANU Факультет ИТ · Кибербезопасность и облачные вычисления · Учебный год 2026 🏆 Самая высокая оценка в университете: 97% 📖 Обзор Zero-Day Legacy — это реалистичная, намеренно уязвимая лабораторная машина Boot-to-Root CTF Capture The Flag , созданная в рамк...

CVE-2026-78112

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

EUVD-2026-64647

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2026-78112 itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2026-78112

A SQL injection vulnerability exists in itsourcecode Hospital Management System Project in PHP 1.0 , specifically in the file /viewservicetype.php through manipulation of the delid parameter. The flaw can be exploited remotely and requires low privileges (authenticated access). CVSS 3.1 scores it...

PT-2026-79765

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2026-77025

A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentpending.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available...