1837 matches found
CVE-2022-24136
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
Design/Logic Flaw
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
CVE-2022-24136
CVE-2022-24136 affects Hospital Management System v1.0 and involves an unrestricted file upload in treatmentrecord.php . An attacker can upload a PHP file and remotely execute code, enabling arbitrary code execution. Multiple connected sources (CNVD-2022-81375, NVD, Red Hat, CNVD variants) corrob...
CVE-2022-24136
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
PHPGurukul Hospital Management System 安全漏洞
Hospital Management System is a PHP and MySQL-based hospital management system. v1.0 of Hospital Management System is vulnerable to unauthorized access, which stems from a missing authorization component that could be exploited to access sensitive information and obtain administrator passwords...
Projectworlds Hospital Management System Privilege Error Vulnerability
Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. Projectworlds Hospital Management System version 1.0 is vulnerable to a privilege error that could be exploited by an unauthorized attacker to add unlimited patients via addppatient.php...
CVE-2021-45852
An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via addpatient.php...
CVE-2021-45852
An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via addpatient.php...
Design/Logic Flaw
An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via addpatient.php...
CVE-2021-45852
Projectworlds Hospital Management System v1.0 contains a privilege error allowing an unauthorized attacker to add patients without restriction via add_patient.php (and related add_ppatient.php in some references). The core issue is improper authorization for patient creation, enabling unlimited e...
HMS Cross-Site Scripting Vulnerability (CNVD-2022-84075)
HMS is a computer or web based hospital management system in Bangladesh. Useful for managing the operations of a hospital or any healthcare facility.HMS version 1.0 has a cross-site scripting vulnerability that can be exploited by attackers to cause a reflected cross-site scripting XSS...
CVE-2022-25491
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php...
HMS SQL注入漏洞
HMS is a computer or web based hospital management system by Kabir Khyrul personal developer in Bangladesh. It helps to manage the operations of a hospital or any healthcare organization. A SQL injection vulnerability exists in HMS version 1.0, which allows attackers to perform SQL injection via...
HMS SQL注入漏洞
HMS is a computer or web based hospital management system by Kabir Khyrul personal developer in Bangladesh. It helps to manage the operations of a hospital or any healthcare organization. A SQL injection vulnerability exists in HMS version 1.0 which allows an attacker to perform SQL injection via...
HMS 跨站脚本漏洞
HMS is a computer or web based hospital management system in Bangladesh. Useful for managing the operations of a hospital or any healthcare facility.HMS version 1.0 has a cross-site scripting vulnerability that can be exploited by attackers to cause a reflected cross-site scripting XSS...
HMS SQL注入漏洞
HMS is a computer or web based hospital management system by Kabir Khyrul personal developer in Bangladesh. It helps to manage the operations of a hospital or any healthcare organization. A security vulnerability exists in HMS version 1.0 which allows an attacker to perform SQL injection through...
Hospital Management System Cross-Site Scripting Vulnerability (CNVD-2022-67482)
Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A cross-site scripting vulnerability exists in Hospital Management System v1.0, which stems from the lack of...
CVE-2022-25407
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Doctor parameter at /admin-panel1.php...