Lucene search
+L

2268 matches found

Positive Technologies
Positive Technologies
•added 2025/08/07 12:00 a.m.•17 views

PT-2025-32297 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to multiple SQL injection flaws within the contact.php file. These flaws are triggered through the txtname, txtphone, and txtmail parameters...

9.8CVSS7.5AI score0.00351EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/08/07 12:00 a.m.•28 views

CVE-2023-41526

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters...

0.00351EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/07 12:00 a.m.•21 views

PT-2025-32295 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple SQL injection flaws within the func1.php file. These flaws are present through the username3 and password3 parameters. Recommendations: Apply...

9.8CVSS7.5AI score0.00351EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/08/07 12:00 a.m.•10 views

CVE-2023-41531

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...

7.8AI score0.00302EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/07 12:00 a.m.•17 views

PT-2025-32298 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple cross-site scripting XSS vulnerabilities in the func2.php file. These vulnerabilities are triggered through the fname and lname parameters...

6.1CVSS6AI score0.00202EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/07 12:00 a.m.•7 views

CVE-2023-41528: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters...

9.8CVSS5.8AI score0.00351EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/07 12:00 a.m.•16 views

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of the parameter patientcontact in the file patientsearch.php...

9.8CVSS7.6AI score0.00351EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/07 12:00 a.m.•41 views

CVE-2023-40992

The Hospital Management System version 4 is vulnerable to a SQL injection vulnerability (CWE-89) caused by insufficient input validation. The flaw exists in the /Hospital-Management-System-master/func.php file when processing the password2 parameter. Exploitation could lead to unauthorized access...

6.5CVSS7.3AI score0.00219EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2025/08/07 12:00 a.m.•45 views

CVE-2023-41529

Hospital Management System v4 contains multiple cross-site scripting (XSS) vulnerabilities located in the func2.php file. The root cause is the incorrect manipulation and failure to sanitize the fname and lname parameters, which allows for the injection of malicious scripts. To mitigate this risk...

6.1CVSS6AI score0.00202EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/08/07 12:00 a.m.•17 views

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which is caused by a cross-site scripting attack due to incorrect manipulation of the parameters fname and lname in the file...

6.1CVSS6AI score0.00202EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/07 12:00 a.m.•3 views

CVE-2023-40992: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter...

6.5CVSS5.8AI score0.00219EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/07 12:00 a.m.•15 views

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version 4, which originates from SQL injection due to incorrect manipulation of parameter password2 in file...

6.5CVSS7.7AI score0.00219EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/07 12:00 a.m.•6 views

CVE-2023-41530: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...

9.8CVSS5.8AI score0.00351EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/07 12:00 a.m.•10 views

CVE-2023-41527

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...

7.6AI score0.00351EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/07 12:00 a.m.•5 views

CVE-2023-41525: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...

9.8CVSS5.8AI score0.00351EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/07 12:00 a.m.•15 views

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of parameters username1 and password2 in file func3.php...

8.8CVSS7.6AI score0.00302EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/08/07 12:00 a.m.•8 views

CVE-2023-40992

Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter...

7.3AI score0.00219EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/07 12:00 a.m.•19 views

PT-2025-32301 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection due to the doctor contact parameter in the doctorsearch.php file. Recommendations: As a temporary workaround, consider...

8.8CVSS7.2AI score0.00302EPSS
SaveExploits0References5
CVE
CVE
•added 2025/08/07 12:00 a.m.•39 views

CVE-2023-41531

The Hospital Management System v4 , developed by Kishan Lal, contains multiple SQL injection vulnerabilities in the func3.php file. The root cause is the incorrect manipulation and lack of proper sanitization of the username1 and password2 parameters. Exploitation of these vulnerabilities could a...

8.8CVSS7.8AI score0.00302EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/07 12:00 a.m.•6 views

CVE-2023-41526: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters...

9.8CVSS5.8AI score0.00351EPSS
SaveExploits0References1
Rows per page
Query Builder