Cross site scripting

Hospital Management System v 4.0 is vulnerable to Cross Site Scripting XSS via /hospital/hms/admin/patient-search.php...

PT-2022-10461 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: The issue concerns SQL Injection, which can be exploited via the file hospital/hms/admin/view-patient.php. This allows for potential unauthorized access or manipulation of data...

Hospital Management System 跨站脚本漏洞

The Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A cross-site scripting vulnerability exists in Hospital Management System version 4.0 that originates from a cross-site scripting...

CVE-2021-35387

CVE-2021-35387 affects Hospital Management System v4.0. The vulnerability is a SQL Injection via the file hospital/hms/admin/view-patient.php, as documented across multiple sources. The CVSS metrics indicate high impact to confidentiality, integrity, and availability (AV:N/AC:L/PR:L/UI:N/S:U/C:H/...

CVE-2021-35387

Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php...

CVE-2021-35388

Hospital Management System v 4.0 is vulnerable to Cross Site Scripting XSS via /hospital/hms/admin/patient-search.php...

CVE-2021-35387

Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php...

CVE-2021-35388

Hospital Management System v 4.0 is vulnerable to Cross Site Scripting XSS via /hospital/hms/admin/patient-search.php...

PT-2022-10462 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the /hospital/hms/admin/patient-search.php API endpoint. Recommendations: For Hospital Management System...

Hospital Management System SQL注入漏洞

The Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System version 4.0, which stems from a SQL injection issue in the...

CVE-2021-35388

CVE-2021-35388 affects Hospital Management System v4.0. The vulnerability is a Cross-Site Scripting (XSS) issue exposed through the admin endpoint /hospital/hms/admin/patient-search.php. Documents consistently describe an XSS flaw in that location; no root-cause details beyond the XSS label are p...

Hospital Management System Cross-Site Scripting Vulnerability (CNVD-2022-72088)

Hospital Management System HMS is a computer system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. hospital Management System v4.0 is vulnerable to a cross-site scripting vulnerability that originates in the add-patient. php file, severa...

CVE-2022-42206

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...

CVE-2022-42206

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...

CVE-2022-42205

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via add-patient.php...

Cross site scripting

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via add-patient.php...

CVE-2022-42205

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via add-patient.php...

PT-2022-26312 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It affects the "doctor/view-patient.php", "admin/view-patient.php", and "view-medhistory.php" endpoints...

CVE-2022-42205

PHPGurukul Hospital Management System (PHP, v4.0) has an XSS vulnerability in add-patient.php due to insufficient input validation/encoding. An attacker can inject JavaScript via user-supplied fields, potentially compromising other users (including admins) and their sessions. No official patch/ve...

CVE-2022-42206

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...