Sql injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsreports.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

Cross site scripting

PHPGurukul Hospital Management System in PHP v4.0 has a Persistent Cross-Site Scripting vulnerability in \hms\admin\appointment-history.php. Remote registered users can exploit the vulnerability to obtain user cookie data...

Sql injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\getdoctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

Information disclosure

PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas. Remote unauthenticated users can exploit the vulnerability to obtain user sensitive information...

Sql injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\checkavailability.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

Sql injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

Sql injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\change-emaild.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

Sql injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\forgot-password.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

Sql injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

Sql injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\getdoctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22176

PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas. Remote unauthenticated users can exploit the vulnerability to obtain user sensitive information...

CVE-2020-22176

The CVE-2020-22176 entry concerns PHPGurukul Hospital Management System in PHP v4.0 with a sensitive information disclosure vulnerability across multiple areas. The connected records confirm that remote unauthenticated attackers can exploit this flaw to obtain sensitive user information. Details ...

CVE-2020-22170

CVE-2020-22170 affects PHPGurukul Hospital Management System v4.0. A SQL injection vulnerability exists in hms\get_doctor.php that allows remote unauthenticated attackers to extract sensitive data from the database. Root cause is unsafe handling of user input in the SQL query. Affected component ...

CVE-2020-22164

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\checkavailability.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22164

PHPGurukul Hospital Management System v4.0 contains a SQL injection vulnerability in hms\check_availability.php that allows remote unauthenticated attackers to obtain sensitive information from the database. The issue is confirmed across multiple connected sources (e.g., Red Hat advisory, CNVD/CN...

CVE-2020-22165

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22165

Summary: CVE-2020-22165 affects PHPGurukul Hospital Management System v4.0. The vulnerability is a SQL injection in the hms\user-login.php page that allows remote, unauthenticated attackers to obtain sensitive data from the database. What’s affected: PHPGurukul Hospital Management System in PHP v...

CVE-2020-22166

The CVE-2020-22166 entry concerns the PHPGurukul Hospital Management System (HM S) version 4.0, where a SQL injection exists in the \hms\forgot-password.php. The vulnerability allows remote unauthenticated attackers to retrieve sensitive database information. Multiple connected sources confirm th...

CVE-2020-22166

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\forgot-password.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22167

PHPGurukul Hospital Management System in PHP v4.0 has a Persistent Cross-Site Scripting vulnerability in \hms\admin\appointment-history.php. Remote registered users can exploit the vulnerability to obtain user cookie data...