CVE-2021-39411

CVE-2021-39411 affects PHPGurukul Hospital Management System 4.0. Vulnerable components: searchdata (doctor/search.php, admin/patient-search.php) and fromdate/todate (admin/betweendates-detailsreports.php), enabling Cross-Site Scripting. Root cause: inadequate input sanitization in those endpoint...

Hospital Management System Cross Site Scripting

Exploit Title: XSS-Stored PHPSESSID user PWNED on Hospital Management System Vulnerable parameter "txtMsg" on contact Author: nu11secur1ty Testing and Debugging: nu11secur1ty Date: 08.17.2021 Vendor: https://github.com/kishan0725/Hospital-Management-System Link:...

PHPGurukul Hospital Management System Cross-Site Scripting Vulnerability (CNVD-2021-68753)

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. PHPGurukul Hospital Management System is vulnerable to cross-site scripting, which can be exploited by attackers to execute js code via prescribe.php...

PHPGurukul Hospital Management System has an unspecified vulnerability

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. a security vulnerability exists in PHPGurukul Hospital Management System, which originates from admin-panel1.php in the software, which can delete unauthenticated authenticated physician entries. No details...

CVE-2021-38754

SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php...

CVE-2021-38755

Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php...

CVE-2021-38756

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through prescribe.php...

CVE-2021-38757

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through contact.php...

Sql injection

SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php...

CVE-2021-38757

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through contact.php...

Design/Logic Flaw

Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php...

Cross site scripting

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through contact.php...

Cross site scripting

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through prescribe.php...

CVE-2021-38755

Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php...

CVE-2021-38757

CVE-2021-38757 is a reported persistent cross-site scripting (XSS) vulnerability in a Hospital Management System (often referenced as PHPGurukul/Hospital Management System). The public descriptions consistently state that the XSS is targeted at the web admin via the contact.php endpoint. Exploit ...

CVE-2021-38757

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through contact.php...

CVE-2021-38756

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through prescribe.php...

CVE-2021-38756

CVE-2021-38756: Persistent cross-site scripting in Hospital Management System (PHPGurukul) via prescribe.php affecting web admin. Descriptions indicate the vulnerability enables execution of JavaScript through input on prescribe.php; root cause not explicitly stated in provided documents. CVSS sc...

CVE-2021-38755

This CVE (CVE-2021-38755) concerns the Hospital Management System (PHPGurukul) where the admin-panel1.php endpoint allows deletion of doctor entries without authentication. The connected documents consistently describe an unauthenticated entry deletion flaw affecting doctor/physician records, imp...

CVE-2021-38754

SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php...