CVE-2020-25271

The CVE-2020-25271 entry concerns PHPGurukul hospital-management-system-in-php version 4.0, where multiple endpoints (admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, admin/appointment-history.php) expose an XSS vulnerability. Root cause and exact...

CVE-2020-25271

PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php...

PT-2020-16054 · Phpgurukul · Phpgurukul Hospital-Management-System-In-Php

Name of the Vulnerable Software and Affected Versions: PHPGurukul hospital-management-system-in-php version 4.0 Description: The issue allows for XSS attacks via several endpoints, including "admin/patient-search.php", "doctor/search.php", "book-appointment.php", "doctor/appointment-history.php",...

OpenClinic GA suffers from an unspecified vulnerability (CNVD-2021-17436)

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. A security vulnerability exists in OpenClinic GA version 5.09.02 and 5.89.05b, which can be exploited by an attacker...

Phpgurukul Hospital Management System Authentication Bypass

An authentication bypass vulnerability exists in Phpgurukul Hospital Management System. Successful exploitation of this vulnerability allows an attacker to gain complete access to the configuration of the affected system...

Hospital Management System 4.0 Cross Site Scripting

Exploit Title: Hospital Management System 4.0 Stored Cross-Site Scripting Vulnerability Date: 2020-01-20 Exploit Author: Priyanka Samak Vendor Homepage: https://phpgurukul.com/ Software Link : https://phpgurukul.com/hospital-management-system-in-php/ Software : Hospital Management System Version ...

CVE-2020-5193

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter...

Cross site scripting

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter...

CVE-2020-5193

CVE-2020-5193 affects PHPGurukul Hospital Management System in PHP v4.0. The issue is multiple reflected XSS vulnerabilities exploitable via the searchdata and Doctorspecialization parameters, enabling injection of arbitrary scripts in end-user browsers. No official patch/version update details a...

CVE-2020-5193

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter...

PT-2020-18294 · Phpgurukul · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System in PHP version 4.0 Description: The issue concerns multiple reflected XSS vulnerabilities. These can be triggered via the searchdata or Doctorspecialization parameter. Recommendations: For PHPGurukul...

Hospital Management System 4.0 Cross Site Scripting

Exploit Title: Hospital Management System 4.0 Multiple Reflected XSS Google Dork: N/A Date: 1/2/2020 Exploit Author: FULLSHADE Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/hospital-management-system-in-php/ Version: v4.0 Tested on: Windows CVE : CVE-2020-5193...

Hospital Management System Cross-Site Scripting Vulnerability

Hospity is a cloud-based software for EMR maintenance in hospitals, clinics, labs, and pharmacies. A cross-site scripting vulnerability exists in Hospital Management System version 4.0, which stems from a lack of proper validation of client-side data in the WEB application and can be exploited by...

CVE-2020-5191

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities...

CVE-2020-5191

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities...

Cross site scripting

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities...

Sql injection

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not validating user input, and allow for the application's database and information to be fully compromised...

CVE-2020-5191

PHPGurukul Hospital Management System in PHP v4.0 is affected by multiple Persistent XSS (Cross‑Site Scripting) vulnerabilities, as documented by CVE-2020-5191. The cited sources consistently describe the issue as client-side script injections that could be executed in the context of the affected...

CVE-2020-5192

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not validating user input, and allow for the application's database and information to be fully compromised...

CVE-2020-5192

Hospital Management System 4.0 from PHPGurukul contains multiple SQL injection vulnerabilities due to insufficient input validation on various pages/parameters. Exploitation could allow an attacker to read/modify data and perform unauthorized administrative actions within the app’s context, poten...