PT-2024-17182

Name of the Vulnerable Software and Affected Versions CodeAstro Hospital Management System version 1.0 Description A critical issue was found in the CodeAstro Hospital Management System, affecting an unknown function of the file /backend/doc/his doc update-account.php. The manipulation of the doc...

CVE-2024-11102

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched...

CVE-2024-11102

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched...

CVE-2024-11102 SourceCodester Hospital Management System edit-doc.php cross site scripting

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched...

CVE-2024-11102

CVE-2024-11102 affects SourceCodester Hospital Management System 1.0. The vulnerability resides in the file /vm/doctor/edit-doc.php, where manipulation of the name parameter enables cross-site scripting. Exploitation can be performed remotely, and multiple parameters may be affected. Public discl...

CVE-2024-11102 SourceCodester Hospital Management System edit-doc.php cross site scripting

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched...

SourceCodester Hospital Management System 代码注入漏洞

SourceCodester Hospital Management System is a SourceCodester open source hospital management system. A code injection vulnerability exists in SourceCodester Hospital Management System version 1.0, which stems from an incorrect manipulation of the parameter name that can lead to cross-site...

CVE-2024-11102: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched...

CVE-2024-11073

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely...

CVE-2024-11073

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely...

CVE-2024-11073

SourceCodester Hospital Management System 1.0 contains an IDOR-like issue in /vm/patient/delete-account.php where manipulation of the id parameter allows improper authorization. The vulnerability can be exploited remotely and exploits have been disclosed publicly. No patch/version specifics are p...

CVE-2024-11073 SourceCodester Hospital Management System delete-account.php improper authorization

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely...

CVE-2024-11073 SourceCodester Hospital Management System delete-account.php improper authorization

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely...

PT-2024-16764 · Sourcecodester · Sourcecodester Hospital Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Hospital Management System version 1.0 Description: A high-severity issue affects the SourceCodester Hospital Management System, where the manipulation of the name argument in the /vm/doctor/edit-doc.php file leads to cross-sit...

PT-2024-16737

Name of the Vulnerable Software and Affected Versions SourceCodester Hospital Management System version 1.0 Description A vulnerability has been found in the SourceCodester Hospital Management System, affecting an unknown part of the file /vm/patient/delete-account.php. The manipulation of the id...

CVE-2024-11073: Improper Authorization

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely...

Hospital Management System Cross-site Scripting Vulnerability (CNVD-2026-32773)

Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a cross-site scripting vulnerability. This vulnerability stems from the parameter searchdata in the hms/doctor/search.php file, which lacks...

CVE-2024-10807

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the file hms/doctor/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely...

CVE-2024-10806

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulnerability affects unknown code of the file betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to cross site scripting. The attack can be...

CVE-2024-10806

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulnerability affects unknown code of the file betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to cross site scripting. The attack can be...