2273 matches found
CVE-2024-10807 PHPGurukul Hospital Management System search.php cross site scripting
A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the file hms/doctor/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely...
CVE-2024-10807 PHPGurukul Hospital Management System search.php cross site scripting
A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the file hms/doctor/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely...
CVE-2024-10807
The CVE-2024-10807 entry concerns PHPGurukul Hospital Management System v4.0. A vulnerability in the file hms/doctor/search.php arises from manipulating the argument searchdata, causing cross-site scripting (XSS). The issue is remotely initiable and the public exploit has been disclosed. Affected...
CVE-2024-10806 PHPGurukul Hospital Management System betweendates-detailsreports.php cross site scripting
A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulnerability affects unknown code of the file betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to cross site scripting. The attack can be...
CVE-2024-10806
CVE-2024-10806 affects PHPGurukul Hospital Management System 4.0, specifically the betweendates-detailsreports.php file. The root cause is lack of proper filtering/escaping of user-supplied data in the fromdate/todate parameters, enabling cross-site scripting. The issue can be triggered remotely ...
PHPGurukul Hospital Management System 安全漏洞
PHPGurukul Hospital Management System is an open source PHP and MySQL based hospital management system from PHPGurukul. A security vulnerability exists in PHPGurukul Hospital Management System version 4.0, which stems from an incorrect manipulation of the parameter searchdata that can lead to...
CVE-2024-10807: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the file hms/doctor/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely...
CVE-2024-10806: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulnerability affects unknown code of the file betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to cross site scripting. The attack can be...
Hospital Management System Cross-site Scripting Vulnerability (CNVD-2026-32775)
Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a cross-site scripting vulnerability. This vulnerability arises from the docname parameter in /doctor/edit-profile.php and the adminremark paramet...
Hospital Management System add-doctor.php File SQL Injection Vulnerability
Hospital Management System a hospital management system. Hospital Management System has a SQL injection vulnerability that originates from the parameter docname in the file /admin/add-doctor.php that can lead to SQL injection. No details of the vulnerability are available at this time...
CVE-2024-10350
A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...
CVE-2024-10350
A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...
CVE-2024-10350
CVE-2024-10350 concerns the code-projects Hospital Management System 1.0. The vulnerability is a SQL injection in the file /admin/add-doctor.php caused by unsafely manipulated the parameter docname . It is a remote issue with public exploit disclosure, and multiple sources classify the impact as ...
CVE-2024-10350 code-projects Hospital Management System add-doctor.php sql injection
A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...
CVE-2024-10350 code-projects Hospital Management System add-doctor.php sql injection
A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...
PT-2024-16209
Name of the Vulnerable Software and Affected Versions code-projects Hospital Management System version 1.0 Description A critical issue has been identified, affecting the /admin/add-doctor.php file. The manipulation of the docname argument leads to SQL injection. This issue can be exploited...
Code-Projects Hospital Management System SQL注入漏洞
Hospital Management System a hospital management system. Hospital Management System has a SQL injection vulnerability that originates from the parameter docname in the file /admin/add-doctor.php that can lead to SQL injection. No details of the vulnerability are available at this time...
CVE-2024-10350: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...