CVE-2024-0360

CVE-2024-0360 pertains to PHPGurukul Hospital Management System 1.0. The vulnerability is a SQL injection in the parameter doctorspecilization used by the file admin/edit-doctor-specialization.php. Public disclosure of exploits is noted, with high potential impact (per NVD CVSS v3.1: 9.8, critica...

CVE-2024-0360 PHPGurukul Hospital Management System edit-doctor-specialization.php sql injection

A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/edit-doctor-specialization.php. The manipulation of the argument doctorspecilization leads to sql injection. The exploit has been...

CVE-2024-0360 PHPGurukul Hospital Management System edit-doctor-specialization.php sql injection

A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/edit-doctor-specialization.php. The manipulation of the argument doctorspecilization leads to sql injection. The exploit has been...

Hospital Management System 安全漏洞

A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. Hospital Management System has an arbitrary file upload vulnerability that stems from the application's lack of effective...

CVE-2020-26627

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries - Unread Query' tab...

CVE-2020-26627: Improper Neutralization of Special Elements used in an SQL Command

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries - Unread Query' tab...

CVE-2020-26629

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker to upload any file to the server...

PHPGurukul Hospital Management System Security Vulnerability

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A security vulnerability exists in version 1.0 of the PHPGurukul Hospital Management System, which is caused by an SQL injection vulnerability in the searchdata parameter of the admin/patient-search.php pag...

CVE-2020-26630

CVE-2020-26630 describes a Time-Based SQL Injection in Hospital Management System v4.0 where an attacker with admin login can cause the application to dump database information via a payload in the Doctor Specialization field (Go to Doctors). The root cause is an injectable input in that field wh...

CVE-2020-26628

A Cross-Site Scripting XSS vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended to a username on the 'Edit Profile" page and triggered by another user visiting the profile...

CVE-2024-0364: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file admin/query-details.php. The manipulation of the argument adminremark leads to sql injection. The exploit has been disclosed to the public and may be...

CVE-2020-26627

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries - Unread Query' tab...

PHPGurukul Hospital Management System SQL Injection Vulnerability

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A SQL injection vulnerability exists in PHPGurukul Hospital Management System version 1.0, which originates from a SQL injection vulnerability in the adminremark parameter of the admin/query-details.php pag...

CVE-2020-26629

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker to upload any file to the server...

CVE-2020-26629

CVE-2020-26629 affects Hospital Management System v4.0. Affected component: Hospital Management System (HMS) – file upload functionality allows an unauthenticated attacker to upload arbitrary files to the server, enabling potential code execution or data exposure. The published details indicate a...

CVE-2020-26630

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a special payload in the 'Doctor Specialization' field under the 'Go to Doctors' tab after logging in as an admin...

Hospital Management System 跨站脚本漏洞

A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. A cross-site scripting vulnerability exists in Hospital Management System V4.0, which stems from the application's lack of effective...

CVE-2020-26628

CVE-2020-26628 affects Hospital Management System v4.0, with an XSS in the Edit Profile username field. Root cause: insufficient input filtering/escaping, allowing a malicious payload to execute when another user views the profile. Impact: arbitrary script/HTML execution in the victim’s browser (...

CVE-2020-26630

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a special payload in the 'Doctor Specialization' field under the 'Go to Doctors' tab after logging in as an admin...

CVE-2020-26628: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended to a username on the 'Edit Profile" page and triggered by another user visiting the profile...