Lucene search
+L

2268 matches found

CNVD
CNVD
•added 2025/08/20 12:00 a.m.•19 views

Hospital Management System SQL Injection Vulnerability

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter doctorspecilization in the file...

9.8CVSS8.2AI score0.00434EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/08/20 12:00 a.m.•18 views

Hospital Management System edit-doctor.php file SQL Injection Vulnerability

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter docfees in the file /admin/edit-doctor.php. An...

9.8CVSS8.2AI score0.00541EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/08/16 10:10 a.m.•25 views

CVE-2025-8955

A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

9.8CVSS7.9AI score0.00541EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/08/16 9:26 a.m.•32 views

CVE-2025-8954

A vulnerability was identified in PHPGurukul Hospital Management System 4.0. This affects an unknown part of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS7.7AI score0.00434EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/08/14 10:15 a.m.•27 views

CVE-2025-8955

A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

9.8CVSS5.8AI score0.00541EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/14 9:32 a.m.•59 views

CVE-2025-8955

PHPGurukul Hospital Management System 4.0 contains a SQL injection vulnerability in /admin/edit-doctor.php, triggered by manipulating the docfees parameter. The issue is remote-exploitable and the exploit has been publicly disclosed. Multiple sources corroborate the vulnerability, affecting the P...

9.8CVSS7AI score0.00541EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/14 9:32 a.m.•12 views

CVE-2025-8955 PHPGurukul Hospital Management System edit-doctor.php sql injection

A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS7.8AI score0.00541EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/08/14 9:32 a.m.•34 views

CVE-2025-8955 PHPGurukul Hospital Management System edit-doctor.php sql injection

A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS0.00541EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/14 9:02 a.m.•48 views

CVE-2025-8954

CVE-2025-8954 affects PHPGurukul Hospital Management System 4.0 in the /admin/doctor-specilization.php file, where the doctorspecilization parameter is susceptible to SQL injection. The vulnerability can be exploited remotely and an exploit has been publicly disclosed. Multiple connected sources ...

9.8CVSS7.6AI score0.00434EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/08/14 9:02 a.m.•36 views

CVE-2025-8954 PHPGurukul Hospital Management System doctor-specilization.php sql injection

A vulnerability was identified in PHPGurukul Hospital Management System 4.0. This affects an unknown part of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS0.00434EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/08/14 12:00 a.m.•16 views

PHPGurukul Hospital Management System 安全漏洞

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter docfees in the file /admin/edit-doctor.php. An...

9.8CVSS8.1AI score0.00541EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•5 views

CVE-2025-8955: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

9.8CVSS5.5AI score0.00541EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•4 views

CVE-2025-8954: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in PHPGurukul Hospital Management System 4.0. This affects an unknown part of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.6AI score0.00434EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/08/13 12:00 a.m.•25 views

CVE-2025-50594

An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allowing attackers to reset any account password...

0.00372EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/13 12:00 a.m.•9 views

CVE-2025-50594: Weak Password Recovery Mechanism for Forgotten Password

An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allowing attackers to reset any account password...

9.8CVSS5.7AI score0.00372EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/09 12:23 a.m.•16 views

CVE-2023-41527

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...

9.8CVSS8AI score0.00351EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/09 12:23 a.m.•19 views

CVE-2023-41529

Hospital Management System v4 was discovered to contain multiple cross-site scripting XSS vulnerabilities in func2.php via the fname and lname parameters...

6.1CVSS6.2AI score0.00202EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/09 12:23 a.m.•18 views

CVE-2023-41528

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters...

9.8CVSS8.2AI score0.00351EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/09 12:23 a.m.•15 views

CVE-2023-41532

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...

8.8CVSS8AI score0.00302EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/09 12:23 a.m.•14 views

CVE-2023-41531

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...

8.8CVSS8.2AI score0.00302EPSS
SaveExploits0References1
Rows per page
Query Builder