CVE-2024-0268 Kashipara Hospital Management System registration.php sql injection

A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age/city leads to sql injection. The atta...

CVE-2024-0268 Kashipara Hospital Management System registration.php sql injection

A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age/city leads to sql injection. The atta...

CVE-2024-0267

CVE-2024-0267 affects the Kashipara Hospital Management System (up to version 1.0). The vulnerability lies in the Parameter Handler’s file login.php, where the inputs in the fields email and password are manipulated to perform a SQL injection. This allows remote exploitation, and the exploit has ...

CVE-2024-0286: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file index.phpcontactus of the component Contact Form. The manipulation of the argument Name/Email/Message leads to cross site scripting. It is possibl...

CVE-2024-0268: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age/city leads to sql injection. The atta...

CVE-2024-0267: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Kashipara Hospital Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component Parameter Handler. The manipulation of the argument email/password leads to sql injection. The atta...

Hospital Management System SQL注入漏洞

A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. A SQL injection vulnerability exists in Hospital Management System version 1.0, which stems from a lack of validation of externally...

Hospital Management System Cross-site Scripting Vulnerability (CNVD-2026-32778)

Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a cross-site scripting vulnerability. This vulnerability stems from the parameter “First Name” in the file registration.php, which lacks effective...

Hospital Management System SQL Injection Vulnerability (CNVD-2026-32771)

Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the Admin Dashboard component. Attackers can...

Exploit for Cross-site Scripting in Phpgurukul Hospital_Management_System

CVE-2023-7173: Stored Cross-Site Scripting XSS in Hospital M...

Exploit for SQL Injection in Phpgurukul Hospital_Management_System

CVE-2023-7172 Overview This project contains a vulnerabl...

CVE-2023-7173

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

Cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2023-7173 PHPGurukul Hospital Management System registration.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2023-7173

CVE-2023-7173 affects PHPGurukul Hospital Management System 1.0, with a vulnerability in the registration.php file where the First Name/Fullname parameter can be manipulated to trigger a cross-site scripting attack. The issue allows remote initiation, and exploits have been disclosed publicly (VD...

CVE-2023-7172

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2023-7172

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

Sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2023-7172 PHPGurukul Hospital Management System Admin Dashboard sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2023-7172

CVE-2023-7172 describes a SQL Injection in PHPGurukul Hospital Management System 1.0, affecting the Admin Dashboard/Admin login page. Connected docs provide PoC payloads (e.g., username with a crafted input) and claim potential login bypass, confirming a network-exposed vulnerability. The initial...