Lucene search
+L

2268 matches found

NVD
NVD
•added 2025/11/18 6:16 p.m.•22 views

CVE-2025-63514

kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...

6.1CVSS0.00198EPSS
SaveExploits1References2
NVD
NVD
•added 2025/11/18 5:16 p.m.•22 views

CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

6.5CVSS0.00269EPSS
SaveExploits1References2
OSV
OSV
•added 2025/11/18 5:16 p.m.•19 views

CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

6.5CVSS5.8AI score0.00269EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/18 12:00 a.m.•12 views

CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

5.8AI score0.00269EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/18 12:00 a.m.•35 views

CVE-2025-63513

The kishan0725 Hospital Management System v4 is vulnerable to an Insecure Direct Object Reference (IDOR) flaw in the appointment cancellation functionality. This vulnerability arises from a lack of proper authorization checks when accessing objects directly, which could allow an attacker to perfo...

6.5CVSS5.8AI score0.00269EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/18 12:00 a.m.•18 views

PT-2025-47367

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4 Description The software contains an Insecure Direct Object Reference IDOR issue within the appointment cancellation functionality. This allows potential unauthorized access and manipulation of...

6.5CVSS6.5AI score0.00269EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/18 12:00 a.m.•34 views

CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

0.00269EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/18 12:00 a.m.•4 views

CVE-2025-63513: Authorization Bypass Through User-Controlled Key

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

6.5CVSS5.8AI score0.00269EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/18 12:00 a.m.•34 views

CVE-2025-63512

The kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection within the admin-panel1.php file, specifically affecting the deleting doctor logic . The root cause is the application's failure to properly sanitize or parameterize user-supplied input from the demail parameter, which i...

6.5CVSS5.8AI score0.00238EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2025/11/18 12:00 a.m.•21 views

Hospital Management System 安全漏洞

Hospital Management System is a hospital management software by the individual developer Pon Aravind Boominathan. A security vulnerability exists in Hospital Management System that stems from improper handling of the email parameter in appsearch.php, which could lead to cross-site scripting...

6.1CVSS6.2AI score0.00198EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/11/18 12:00 a.m.•24 views

EUVD-2025-198032

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

6.5AI score0.00269EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/11/18 12:00 a.m.•19 views

PT-2025-47337

Name of the Vulnerable Software and Affected Versions Hospital Management System version 4 Description The Hospital Management System version 4 is susceptible to a SQL Injection issue within the admin-panel1.php file, specifically in the doctor deletion functionality. The application does not...

6.5CVSS7.5AI score0.00238EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/11/18 12:00 a.m.•12 views

CVE-2025-63514

kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...

5.8AI score0.00198EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/18 12:00 a.m.•18 views

PT-2025-47369

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System affected versions not specified Description The software contains a Cross-Site Scripting XSS issue in the 'appsearch.php' file. The issue is triggered through the email parameter. This allows for the...

6.1CVSS6AI score0.00198EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/18 12:00 a.m.•8 views

CVE-2025-63512: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

6.5CVSS5.9AI score0.00238EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/11/18 12:00 a.m.•30 views

CVE-2025-63512

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

0.00238EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/11/18 12:00 a.m.•29 views

CVE-2025-63514

kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...

0.00198EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/18 12:00 a.m.•20 views

Hospital Management System 安全漏洞

Hospital Management System is a hospital management software by Pon Aravind Boominathan Individual Developer. A security vulnerability exists in Hospital Management System version v4, which stems from an insecure direct object reference in the Appointment Cancellation feature that could lead to...

6.5CVSS6.6AI score0.00269EPSS
SaveExploits1References3
CVE
CVE
•added 2025/11/18 12:00 a.m.•30 views

CVE-2025-63514

The kishan0725 Hospital Management System is vulnerable to a Cross-Site Scripting (XSS) flaw (CWE-79) within the appsearch.php component. The root cause is the improper neutralization of input during web page generation, specifically via the email parameter. This allows an attacker to inject and ...

6.1CVSS5.8AI score0.00198EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/18 12:00 a.m.•5 views

CVE-2025-63514: Improper Neutralization of Input During Web Page Generation

kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...

6.1CVSS5.8AI score0.00198EPSS
SaveExploits1References1
Rows per page
Query Builder