SQL Injection Vulnerability in Hospital Management System

Hospital Management System is a hospital management tool for users. The Hospital Management System suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

OpenClinic GA SQL Injection Vulnerability (CNVD-2021-34995)

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. An SQL injection vulnerability exists in the immoCode parameter in listImmoLabels.jsp in OpenClinic GA version...

CVE-2020-36011

CVE-2020-36011 : XSS in Add Patient Form of QDOCS Smart Hospital Management System 3.1. A remote attacker can inject arbitrary code via Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies fields. Documents confirm the affected product and the vulnerability type but do not provide...

CVE-2020-35745

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs...

CVE-2020-35745

Consolidated details for CVE-2020-35745 show a vulnerability in PHPGURUKUL Hospital Management System v4.0 where access to admin/dashboard.php is not properly restricted. The root cause is improper access control on the admin dashboard, enabling an attacker to view all user, doctor, and patient d...

PT-2021-11841 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Hospital Management System version 4.0 Description: The issue allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs due to improper restriction o...

Arbitrary file deletion vulnerability in fbyCMS (CNVD-2021-01927)

fbyCMS is a hospital management system that manages staff and patient records. An arbitrary file deletion vulnerability exists in fbyCMS, which can be exploited by an attacker to delete arbitrary files...

CVE-2020-25271

PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php...

Design/Logic Flaw

PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php...

CVE-2020-25271

The CVE-2020-25271 entry concerns PHPGurukul hospital-management-system-in-php version 4.0, where multiple endpoints (admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, admin/appointment-history.php) expose an XSS vulnerability. Root cause and exact...

CVE-2020-25271

PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php...

PT-2020-16054 · Phpgurukul · Phpgurukul Hospital-Management-System-In-Php

Name of the Vulnerable Software and Affected Versions: PHPGurukul hospital-management-system-in-php version 4.0 Description: The issue allows for XSS attacks via several endpoints, including "admin/patient-search.php", "doctor/search.php", "book-appointment.php", "doctor/appointment-history.php",...

OpenClinic GA suffers from an unspecified vulnerability (CNVD-2021-17436)

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. A security vulnerability exists in OpenClinic GA version 5.09.02 and 5.89.05b, which can be exploited by an attacker...

Phpgurukul Hospital Management System Authentication Bypass

An authentication bypass vulnerability exists in Phpgurukul Hospital Management System. Successful exploitation of this vulnerability allows an attacker to gain complete access to the configuration of the affected system...

Hospital Management System 4.0 Cross Site Scripting

Exploit Title: Hospital Management System 4.0 Stored Cross-Site Scripting Vulnerability Date: 2020-01-20 Exploit Author: Priyanka Samak Vendor Homepage: https://phpgurukul.com/ Software Link : https://phpgurukul.com/hospital-management-system-in-php/ Software : Hospital Management System Version ...

CVE-2020-5193

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter...

Cross site scripting

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter...

CVE-2020-5193

CVE-2020-5193 affects PHPGurukul Hospital Management System in PHP v4.0. The issue is multiple reflected XSS vulnerabilities exploitable via the searchdata and Doctorspecialization parameters, enabling injection of arbitrary scripts in end-user browsers. No official patch/version update details a...

CVE-2020-5193

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter...

PT-2020-18294 · Phpgurukul · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System in PHP version 4.0 Description: The issue concerns multiple reflected XSS vulnerabilities. These can be triggered via the searchdata or Doctorspecialization parameter. Recommendations: For PHPGurukul...