CVE-2023-40992

Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter...

CVE-2023-41531: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...

CVE-2023-41531

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...

CVE-2023-41530

Hospital Management System v4 is vulnerable to a SQL injection vulnerability due to the incorrect manipulation of the app_contact parameter in the appsearch.php file. An attacker could exploit this flaw to execute arbitrary SQL commands. As a temporary workaround, it is recommended to restrict ac...

CVE-2023-41526

The Hospital Management System v4 contains multiple SQL injection vulnerabilities within the func1.php file. The root cause is the improper manipulation and lack of sanitization of the username3 and password3 parameters. Successful exploitation could allow an attacker to perform unauthorized acti...

CVE-2023-41530

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...

PT-2025-32300 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple SQL injection vulnerabilities in the func3.php file. These vulnerabilities are present through the username1 and password2 parameters...

CVE-2023-41532: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of parameters username3 and password3 in file func1.php...

PT-2025-32299 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection issue through the app contact parameter in the appsearch.php file. Recommendations: As a temporary workaround, consider...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of the parameters txtname, txtphone and txtmail in the file...

PT-2025-32296 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection issue through the password2 parameter within the func.php file. This allows for potential unauthorized database access or...

CVE-2023-41528

Hospital Management System v4 is susceptible to multiple SQL injection vulnerabilities located in the contact.php file. The root cause is the incorrect manipulation and lack of proper sanitization of the txtname , txtphone , and txtmail parameters. An attacker could exploit these flaws to execute...

CVE-2023-41525

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of parameter password2 in file func.php...

CVE-2023-41527

Hospital Management System v4 contains a SQL injection vulnerability (CWE-89) located in the func.php file. The flaw exists because the password2 parameter is not properly sanitized or validated before being used in a database query. This vulnerability could allow an attacker to perform unauthori...

CVE-2023-41528

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters...

PT-2025-32286 · Unknown · Hospital Management System Version 4

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: Hospital Management System version 4 is susceptible to a SQL injection due to insufficient input validation. The vulnerability exists in the /Hospital-Management-System-master/func.php file...

CVE-2023-41529: Improper Neutralization of Input During Web Page Generation

Hospital Management System v4 was discovered to contain multiple cross-site scripting XSS vulnerabilities in func2.php via the fname and lname parameters...

CVE-2023-41527: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...