CVE-2024-40502

SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btnloginbClick function of the Loginpage.aspx...

CVE-2024-40502

SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btnloginbClick function of the Loginpage.aspx...

CVE-2024-40502

SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btnloginbClick function of the Loginpage.aspx...

CVE-2024-40502

CVE-2024-40502 affects Hospital Management System Project in ASP.Net MVC 1. The vulnerability is an SQL injection in the btn_login_b_Click function of Loginpage.aspx, caused by concatenating user inputs (txt_login_username.Text and txt_login_pass.Text) into an SQL query without proper parameteriz...

CVE-2024-40502

SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btnloginbClick function of the Loginpage.aspx...

CVE-2024-37802

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu parameter...

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...

CVE-2024-38347

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information module via the id parameter...

CVE-2024-38347

CodeProjects Health Care hospital Management System v1.0 has a SQL injection vulnerability in the Room Information module via the id parameter. The CVSS metrics indicate remote, unauthenticated access with low complexity and high impact to confidentiality, integrity, and availability. Root cause ...

CVE-2024-37802

CodeProjects Health Care hospital Management System v1.0 has a SQL injection flaw in the Patient Info module that is exploitable via the searvalu parameter. The vulnerability affects the Patient Info input handling and can lead to high-impact outcomes in confidentiality, integrity, and availabili...

CVE-2024-37802

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu parameter...

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...

CVE-2024-37803

Multiple stored cross-site scripting XSS vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page...

Health Care hospital Management System SQL Injection Vulnerability

Health Care hospital Management System is an open source health care hospital management system from Code-Projects. A SQL injection vulnerability exists in Health Care hospital Management System v1.0, which originated from a vulnerability that allows an attacker to execute arbitrary web script or...

CVE-2024-37803

Multiple stored cross-site scripting XSS vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page...

CVE-2024-37803

CVE-2024-37803 affects CodeProjects Health Care hospital Management System v1.0. The vulnerability is a stored XSS in the Staff Info page, where crafted payloads injected into fname and lname can execute arbitrary web scripts/HTML. Reported across NVD entries with CVSSv3.1 base metrics of 5.4 (Me...

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 contains a SQL injection vulnerability in the Staff Info module reachable via the searvalu parameter. The issue is documented across multiple sources (NVD, CVE list, CNNVD, PT-Security, etc.) with the vulnerability impacting the Staff Info ...

CVE-2024-5362

A vulnerability classified as critical has been found in SourceCodester Online Hospital Management System 1.0. Affected is an unknown function of the file departmentDoctor.php. The manipulation of the argument deptid leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2024-5362 SourceCodester Online Hospital Management System departmentDoctor.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Hospital Management System 1.0. Affected is an unknown function of the file departmentDoctor.php. The manipulation of the argument deptid leads to sql injection. It is possible to launch the attack remotely. The exploi...