2268 matches found
CVE-2025-63514
kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...
CVE-2025-63513
kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...
CVE-2025-63513
kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...
CVE-2025-63513
kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...
CVE-2025-63513
The kishan0725 Hospital Management System v4 is vulnerable to an Insecure Direct Object Reference (IDOR) flaw in the appointment cancellation functionality. This vulnerability arises from a lack of proper authorization checks when accessing objects directly, which could allow an attacker to perfo...
PT-2025-47367
Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4 Description The software contains an Insecure Direct Object Reference IDOR issue within the appointment cancellation functionality. This allows potential unauthorized access and manipulation of...
CVE-2025-63513
kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...
CVE-2025-63513: Authorization Bypass Through User-Controlled Key
kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...
CVE-2025-63512
The kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection within the admin-panel1.php file, specifically affecting the deleting doctor logic . The root cause is the application's failure to properly sanitize or parameterize user-supplied input from the demail parameter, which i...
Hospital Management System 安全漏洞
Hospital Management System is a hospital management software by the individual developer Pon Aravind Boominathan. A security vulnerability exists in Hospital Management System that stems from improper handling of the email parameter in appsearch.php, which could lead to cross-site scripting...
EUVD-2025-198032
kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...
PT-2025-47337
Name of the Vulnerable Software and Affected Versions Hospital Management System version 4 Description The Hospital Management System version 4 is susceptible to a SQL Injection issue within the admin-panel1.php file, specifically in the doctor deletion functionality. The application does not...
CVE-2025-63514
kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...
PT-2025-47369
Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System affected versions not specified Description The software contains a Cross-Site Scripting XSS issue in the 'appsearch.php' file. The issue is triggered through the email parameter. This allows for the...
CVE-2025-63512: Improper Neutralization of Special Elements used in an SQL Command
kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...
CVE-2025-63512
kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...
CVE-2025-63514
kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...
Hospital Management System 安全漏洞
Hospital Management System is a hospital management software by Pon Aravind Boominathan Individual Developer. A security vulnerability exists in Hospital Management System version v4, which stems from an insecure direct object reference in the Appointment Cancellation feature that could lead to...
CVE-2025-63514
The kishan0725 Hospital Management System is vulnerable to a Cross-Site Scripting (XSS) flaw (CWE-79) within the appsearch.php component. The root cause is the improper neutralization of input during web page generation, specifically via the email parameter. This allows an attacker to inject and ...
CVE-2025-63514: Improper Neutralization of Input During Web Page Generation
kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...