CVE-2023-5053

Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI...

CVE-2023-5053 SQL Injection in hospital-management-system-in-php 378c157 in index.php

Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI...

CVE-2023-5053

The CVE-2023-5053 entry concerns Hospital management system version 378c157, where an SQL injection flaw allows bypassing authentication. The vulnerability is rooted in SQLI in index.php (per CVE records) and is mapped to a high-severity vector (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) wit...

CVE-2023-5053 SQL Injection in hospital-management-system-in-php 378c157 in index.php

Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI...

CVE-2023-5004

The CVE-2023-5004 entry concerns the Hospital management system (version 378c157). The vulnerability is a SQL injection in the authentication flow that allows bypassing login, enabling unauthorized access. Multiple connected sources corroborate that the issue stems from SQLI in the authentication...

CVE-2023-5004 Hospital-management-system-in-php 378c157 - Blind SQL Injection

Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI...

CVE-2023-5004 Hospital-management-system-in-php 378c157 - Blind SQL Injection

Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI...

Projectworlds Hospital Management System SQL Injection Vulnerability

Projectworlds Hospital Management System is a hospital management system from the Austrian company Projectworlds. Projectworlds Hospital Management System version 378c157 suffers from a SQL injection vulnerability that originates from allowing bypassing authentication and is vulnerable to SQL...

Projectworlds Hospital Management System SQL Injection Vulnerability

Projectworlds Hospital Management System is a hospital management system from the Austrian company Projectworlds. Projectworlds Hospital Management System version 378c157 suffers from a SQL injection vulnerability that originates from allowing bypassing authentication and is vulnerable to SQL...

PT-2023-31582

Name of the Vulnerable Software and Affected Versions Hospital management system version 378c157 Description The hospital management system is vulnerable to SQL injection SQLI, which allows attackers to bypass authentication. This issue is related to the application's susceptibility to SQLI...

PT-2023-31460 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital management system version 378c157 Description: The Hospital management system is vulnerable to SQL injection SQLI, which allows attackers to bypass authentication. This issue is related to a SQLI vulnerability in the application...

Vulnerability of the /patient/appointment.php file in the small medical institution management system SourceCodester Free Hospital Management System for Small Practices. This vulnerability allows an attacker to execute arbitrary SQL queries against the database.

The vulnerability of the /patient/appointment.php file in the small medical institution management system SourceCodester Free Hospital Management System for Small Practices is related to the lack of protective measures for the SQL query structure. Exploitation of this vulnerability allows an...

CVE-2023-4443

A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0/5.0.12. Affected is an unknown function of the file vm\doctor\edit-doc.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. It...

CVE-2023-4444

A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vm\patient\edit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to...

Sql injection

A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0/5.0.12. Affected is an unknown function of the file vm\doctor\edit-doc.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. It...

Sql injection

A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vm\patient\edit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to...

CVE-2023-4444 SourceCodester Free Hospital Management System for Small Practices edit-user.php sql injection

A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vm\patient\edit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to...

CVE-2023-4444

The CVE-2023-4444 entry concerns SourceCodester Free Hospital Management System for Small Practices 1.0. Affected is an unknown functionality in vm/patient/edit-user.php. The vulnerability arises from manipulating the argument id00/nic/oldemail/email/spec/Tele, causing SQL injection that can be e...

CVE-2023-4443 SourceCodester Free Hospital Management System for Small Practices edit-doc.php sql injection

A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0/5.0.12. Affected is an unknown function of the file vm\doctor\edit-doc.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. It...

CVE-2023-4443

CVE-2023-4443 affects SourceCodester Free Hospital Management System for Small Practices (versions 1.0–5.0.12). The vulnerability is in an unknown function within vm/doctor/edit-doc.php where manipulating the arguments id00, nic, oldemail, email, spec, or Tele triggers a SQL injection. Remote exp...