CVE-2024-48657

CVE-2024-48657 refers to a SQL injection vulnerability in a Hospital Management System written in PHP (version 1.0.0) that allows remote attackers to execute arbitrary code. The affected component is the Hospital Management System PHP source code; root cause is a SQL injection flaw, leading to po...

PT-2024-33177 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 1.0.0 Description: The issue allows a remote attacker to execute arbitrary code due to a SQL Injection vulnerability in the hospital management system written in PHP. This could put sensitive data at risk...

CVE-2024-48657: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in hospital management system in php with source code v.1.0.0 allows a remote attacker to execute arbitrary code...

CVE-2024-46239

Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php...

CVE-2024-46238

Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php...

PT-2024-31929

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System version 4.0 Description The issue concerns multiple Cross Site Scripting XSS vulnerabilities. These vulnerabilities exist in the PHPGurukul Hospital Management System via the docname parameter in...

CVE-2024-46238

The PHPGurukul Hospital Management System 4.0 (a PHP and MySQL-based system) is susceptible to multiple Cross-Site Scripting (XSS) vulnerabilities. The root cause is the improper neutralization of input during web page generation, specifically due to a lack of effective filtering and escaping of ...

CVE-2024-46239

Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php...

CVE-2024-46238

Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php...

CVE-2024-46238: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php...

CVE-2024-46239

The PHPGurukul Hospital Management System 4.0 is vulnerable to multiple cross-site scripting (XSS) flaws. The root cause is the failure to properly filter and escape user-provided data in the docname parameter within /doctor/edit-profile.php and the adminremark parameter within /admin/query-detai...

CVE-2024-46239: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php...

CVE-2024-10169

A vulnerability classified as critical was found in code-projects Hospital Management System 1.0. This vulnerability affects unknown code of the file change-password.php. The manipulation of the argument cpass leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-10169

A vulnerability classified as critical was found in code-projects Hospital Management System 1.0. This vulnerability affects unknown code of the file change-password.php. The manipulation of the argument cpass leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-10170

A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. This issue affects some unknown processing of the file getdoctor.php. The manipulation of the argument specilizationid leads to sql injection. The attack may be initiated remotely. T...

CVE-2024-10170

A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. This issue affects some unknown processing of the file getdoctor.php. The manipulation of the argument specilizationid leads to sql injection. The attack may be initiated remotely. T...

CVE-2024-10170 code-projects Hospital Management System get_doctor.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. This issue affects some unknown processing of the file getdoctor.php. The manipulation of the argument specilizationid leads to sql injection. The attack may be initiated remotely. T...

CVE-2024-10170

CVE-2024-10170 affects code-projects Hospital Management System 1.0. The vulnerability is a SQL injection in the get_doctor.php page triggered by the misused parameter specilizationid . It is exploitable remotely over the network, with public exploitation reported. Impact is described as high for...

CVE-2024-10169 code-projects Hospital Management System change-password.php sql injection

A vulnerability classified as critical was found in code-projects Hospital Management System 1.0. This vulnerability affects unknown code of the file change-password.php. The manipulation of the argument cpass leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-10169 code-projects Hospital Management System change-password.php sql injection

A vulnerability classified as critical was found in code-projects Hospital Management System 1.0. This vulnerability affects unknown code of the file change-password.php. The manipulation of the argument cpass leads to sql injection. The attack can be initiated remotely. The exploit has been...