Lucene search
+L

2275 matches found

Positive Technologies
Positive Technologies
•added 2023/12/30 12:00 a.m.•4 views

PT-2023-32919

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System version 1.0 Description A critical issue has been found in the Admin Dashboard component of the affected software, leading to sql injection. The attack can be launched remotely. The exploit has been...

7.5CVSS5.5AI score0.01456EPSS
SaveExploits3References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/30 12:00 a.m.•2 views

CVE-2023-7173: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

5.4CVSS4.2AI score0.0146EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/30 12:00 a.m.•3 views

CVE-2023-7172: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.8AI score0.01456EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2023/12/27 12:00 a.m.•45 views

PT-2023-11752 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: A Time-Based SQL Injection issue was discovered, allowing an attacker to dump database information via a special payload in the Doctor Specialization field under the "Go to Doctors" tab afte...

4.9CVSS6.3AI score0.00707EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
•added 2023/12/27 12:00 a.m.•18 views

PT-2023-11750 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: A Cross-Site Scripting XSS vulnerability was discovered in the Hospital Management System, allowing an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended...

6.1CVSS6AI score0.00503EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
•added 2023/12/27 12:00 a.m.•5 views

PT-2023-11749

Name of the Vulnerable Software and Affected Versions Hospital Management System version 4.0 Description A Time-Based SQL Injection issue was discovered, allowing an attacker to dump database information via a crafted payload entered into the Admin Remark parameter under the "Contact Us Queries -...

4.9CVSS5.7AI score0.00707EPSS
SaveExploits3References6
Positive Technologies
Positive Technologies
•added 2023/12/27 12:00 a.m.•12 views

PT-2023-11751 · Unknown +1 · Hospital Management System +1

Name of the Vulnerable Software and Affected Versions: Hospital Management System version V4.0 Description: A JQuery Unrestricted Arbitrary File Upload issue was discovered, allowing an unauthenticated attacker to upload any file to the server. This issue affects the Hospital Management System,...

9.8CVSS9.4AI score0.01181EPSS
SaveExploits3References6
CNNVD
CNNVD
•added 2023/12/24 12:00 a.m.•22 views

Hospital Management System SQL Injection Vulnerability

Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System. No information about this vulnerability is available at this time,...

4.9CVSS7.7AI score0.00707EPSS
SaveExploits3References3
zdt
zdt
•added 2023/12/22 12:00 a.m.•457 views

Hospital Management System 4.0 XSS / Shell Upload / SQL Injection Vulnerabilities

Hospital Management System versions 4.0 and below suffer from cross site scripting, remote shell upload, and remote SQL injection vulnerabilities. Description: Mutiple vulnerabilties were discovered in Hospital Management System Affected CMS: Hospital Management System Affected Version: unread...

9.8CVSS8.1AI score0.01181EPSS
SaveExploits6
Packet Storm
Packet Storm
•added 2023/12/22 12:00 a.m.•517 views

Hospital Management System 4.0 XSS / Shell Upload / SQL Injection

Description: Mutiple vulnerabilties were discovered in Hospital Management System Affected CMS: Hospital Management System Affected Version: unread query - type something in admin remark e.g test and submit Step 3. Replace the POST body to below payload and server will respond after 5 second...

7.4AI score0.01181EPSS
SaveExploits6
CNVD
CNVD
•added 2023/10/17 12:00 a.m.•38 views

Free Hospital Management System SQL Injection Vulnerability

The Free Hospital Management System is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. The Free Hospital Management System suffers from a SQL injection vulnerability that originates from a lack of validation of the...

9.8CVSS7.8AI score0.00763EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/15 10:15 p.m.•24 views

CVE-2023-5587

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /vm/admin/doctors.php of the component Parameter Handler. The manipulation of the argument search leads ...

9.8CVSS7.4AI score0.00763EPSS
SaveExploits1References3
Prion
Prion
•added 2023/10/15 10:15 p.m.•39 views

Sql injection

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /vm/admin/doctors.php of the component Parameter Handler. The manipulation of the argument search leads ...

6.5CVSS9.6AI score0.00763EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/10/15 10:00 p.m.•81 views

CVE-2023-5587

The CVE-2023-5587 entry describes a SQL injection in SourceCodester Free Hospital Management System for Small Practices 1.0, specifically in the /vm/admin/doctors.php file of the Parameter Handler. The vulnerability arises from unsafeguarded manipulation of the search parameter, allowing remote a...

9.8CVSS6.5AI score0.00763EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/15 10:00 p.m.•27 views

CVE-2023-5587 SourceCodester Free Hospital Management System for Small Practices Parameter doctors.php sql injection

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /vm/admin/doctors.php of the component Parameter Handler. The manipulation of the argument search leads ...

6.5CVSS7.3AI score0.00763EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/10/15 10:00 p.m.•44 views

CVE-2023-5587 SourceCodester Free Hospital Management System for Small Practices Parameter doctors.php sql injection

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /vm/admin/doctors.php of the component Parameter Handler. The manipulation of the argument search leads ...

6.5CVSS9.9AI score0.00763EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/10/15 12:00 a.m.•17 views

Hospital Management System SQL注入漏洞

The Free Hospital Management System is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. The Free Hospital Management System suffers from a SQL injection vulnerability that originates from a lack of validation of the...

9.8CVSS8AI score0.00763EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/15 12:00 a.m.•2 views

CVE-2023-5587: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /vm/admin/doctors.php of the component Parameter Handler. The manipulation of the argument search leads ...

9.8CVSS6.5AI score0.00763EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/09/29 1:15 p.m.•6 views

CVE-2023-43909

Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...

9.1CVSS5.9AI score0.00809EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/29 1:15 p.m.•34 views

CVE-2023-43909

Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...

9.1CVSS9.5AI score0.00809EPSS
SaveExploits1References1
Rows per page
Query Builder