CVE-2024-56997

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /doctor/index.php via the 'Email' parameter...

CVE-2024-56997: Improper Neutralization of Input During Web Page Generation

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /doctor/index.php via the 'Email' parameter...

CVE-2024-56998

The PHPGurukul Hospital Management System 4.0 is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of user-supplied data in the /edit-profile.php file. Specifically, the $address parameter lacks effective filtering and escaping, allowing an attacker to inject crafted pay...

CVE-2024-56998: Improper Neutralization of Input During Web Page Generation

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /edit-profile.php via the parameter $address...

Hospital Management System manage-doctors.php File Cross-Site Scripting Vulnerability

Hospital Management System a hospital management system. Hospital Management System has a cross-site scripting vulnerability that originates from a cross-site scripting vulnerability in the Doctor Name parameter of the /hospital/hms/admin/manage-doctors.php file. An attacker can exploit this...

CVE-2024-12983

A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. This affects an unknown part of the file /hospital/hms/admin/manage-doctors.php of the component Edit Doctor Details Page. The manipulation of the argument Doctor Name leads to cross site...

CVE-2024-12983

A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. This affects an unknown part of the file /hospital/hms/admin/manage-doctors.php of the component Edit Doctor Details Page. The manipulation of the argument Doctor Name leads to cross site...

CVE-2024-12983

The CVE-2024-12983 entry concerns code-projects Hospital Management System 1.0. The vulnerability is in the /hospital/hms/admin/manage-doctors.php Edit Doctor Details Page, where manipulating the Doctor Name parameter leads to a cross-site scripting (XSS) issue. Remote exploitation is possible, a...

CVE-2024-12983 code-projects Hospital Management System Edit Doctor Details Page manage-doctors.php cross site scripting

A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. This affects an unknown part of the file /hospital/hms/admin/manage-doctors.php of the component Edit Doctor Details Page. The manipulation of the argument Doctor Name leads to cross site...

CVE-2024-12983 code-projects Hospital Management System Edit Doctor Details Page manage-doctors.php cross site scripting

A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. This affects an unknown part of the file /hospital/hms/admin/manage-doctors.php of the component Edit Doctor Details Page. The manipulation of the argument Doctor Name leads to cross site...

CVE-2024-12976

A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2024-12976 CodeZips Hospital Management System staff.php sql injection

A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2024-12976

CVE-2024-12976 affects CodeZips Hospital Management System 1.0. Affected component: /staff.php where manipulation of the tel parameter enables SQL injection. The vulnerability is exploitable remotely and the exploit has been disclosed publicly. Several sources rate the issue as critical, with CVS...

CVE-2024-12976 CodeZips Hospital Management System staff.php sql injection

A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2024-12976: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit...

Hospital Management System index.php File SQL Injection Vulnerability

Hospital Management System a hospital management system. Hospital Management System has a SQL injection vulnerability that originates from the manipulation of username/password parameters in the login component of the /admin/index.php file. No details of the vulnerability are available at this ti...

PT-2024-17846 · Unknown · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hospital Management System version 1.0 Description: A vulnerability has been found in the code-projects Hospital Management System. This issue affects an unknown part of the file /hospital/hms/admin/manage-doctors.php of the...

Code-Projects Hospital Management System 安全漏洞

Hospital Management System a hospital management system. Hospital Management System has a cross-site scripting vulnerability that originates from a cross-site scripting vulnerability in the Doctor Name parameter of the /hospital/hms/admin/manage-doctors.php file. An attacker can exploit this...

CVE-2024-12983: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. This affects an unknown part of the file /hospital/hms/admin/manage-doctors.php of the component Edit Doctor Details Page. The manipulation of the argument Doctor Name leads to cross site...

CVE-2024-12969

A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. T...