CVE-2022-46093

CVE-2022-46093 affects Hospital Management System v1.0 via SQL Injection, enabling attacker-admin privileges without a password. The vulnerability impact is a high-severity (CVSS 3.1: 8.2) escalation of privileges over the network with no user interaction. Connected sources corroborate SQL inject...

PT-2023-14811 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 1.0 Description: The issue allows attackers to gain administrator privileges without the need for a password through SQL Injection. Recommendations: For Hospital Management System version 1.0, consider...

CVE-2022-46093

Hospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator privileges without the need for a password...

CVE-2022-46093

Hospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator privileges without the need for a password...

CVE-2022-46093: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator privileges without the need for a password...

Hospital Management System SQL Injection Vulnerability

Hospital Management System HMS is a computer system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A security vulnerability exists in Hospital Management System version v1.0, which stems from an attacker being able to obtain administrato...

Hospital Management System Cross-site Request Forgery Vulnerability

The Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A security vulnerability exists in Hospital Management Center that stems from an unknown function of the file appointment.php bein...

CVE-2021-35388

Hospital Management System v 4.0 is vulnerable to Cross Site Scripting XSS via /hospital/hms/admin/patient-search.php...

CVE-2021-35388

Hospital Management System v 4.0 is vulnerable to Cross Site Scripting XSS via /hospital/hms/admin/patient-search.php...

CVE-2021-35387

Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php...

CVE-2021-35387

Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php...

Cross site scripting

Hospital Management System v 4.0 is vulnerable to Cross Site Scripting XSS via /hospital/hms/admin/patient-search.php...

Sql injection

Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php...

CVE-2021-35387

CVE-2021-35387 affects Hospital Management System v4.0. The vulnerability is a SQL Injection via the file hospital/hms/admin/view-patient.php, as documented across multiple sources. The CVSS metrics indicate high impact to confidentiality, integrity, and availability (AV:N/AC:L/PR:L/UI:N/S:U/C:H/...

PT-2022-10462 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the /hospital/hms/admin/patient-search.php API endpoint. Recommendations: For Hospital Management System...

CVE-2021-35388

Hospital Management System v 4.0 is vulnerable to Cross Site Scripting XSS via /hospital/hms/admin/patient-search.php...

Hospital Management System SQL Injection Vulnerability

The Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System version 4.0, which stems from a SQL injection issue in the...

CVE-2021-35388

Hospital Management System v 4.0 is vulnerable to Cross Site Scripting XSS via /hospital/hms/admin/patient-search.php...

CVE-2021-35388: Improper Neutralization of Input During Web Page Generation

Hospital Management System v 4.0 is vulnerable to Cross Site Scripting XSS via /hospital/hms/admin/patient-search.php...

CVE-2021-35387: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php...