3042 matches found
CVE-2022-28929
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the delid parameter at viewtreatmentrecord.php...
CVE-2022-46499
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisadminviewsinglepatient.php...
CVE-2022-46093
Hospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator privileges without the need for a password...
CVE-2022-22854
An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attackers to escalate privileges via accessing and editing the user list...
CVE-2022-32340
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=patients/viewpatient=...
CVE-2022-4013
A vulnerability classified as problematic was found in Hospital Management Center. Affected by this vulnerability is an unknown functionality of the file appointment.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to t...
CVE-2022-48120
SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd on March 13, 2021, allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php...
CVE-2022-46497
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisdocviewsinglepatien.php...
CVE-2022-46498
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the docnumber parameter at hisadminviewsingleemployee.php...
CVE-2022-25407
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Doctor parameter at /admin-panel1.php...
CVE-2022-25409
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...
CVE-2022-25408
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the dpassword parameter at /admin-panel1.php...
CVE-2022-25004
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/managedoctor.php...
WordPress plugin Hospital Management System 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...
CVE-2024-51360
The CVE CVE-2024-51360 affects Hospital Management System In PHP version 4.0, with a vulnerability in hms/doctor/edit-profile.php that enables remote code execution. The issue is documented across multiple feeds (NVD, RH, CNVD, CNNVD, CNVD CNVD, PT-Security) and cited with a high CVSS score (3.1,...
PT-2025-22773 · Unknown · Mojoomla Hospital Management System
Name of the Vulnerable Software and Affected Versions: mojoomla Hospital Management System versions 47.020 through 11 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further...
PT-2025-22765 · Mojoomla · Mojoomla Hospital Management System
Name of the Vulnerable Software and Affected Versions: mojoomla Hospital Management System versions 4.7.020 through 11 Description: The issue is related to an Incorrect Privilege Assignment vulnerability that allows Privilege Escalation in the mojoomla Hospital Management System. Recommendations:...
PHPGurukul Hospital Management System 安全漏洞
Hospital Management System In PHP is a PHP and MySQL based hospital management system. A code execution vulnerability exists in Hospital Management System In PHP, which originates in the hms/doctor/edit-profile.php file could lead to the execution of arbitrary code. No details of the vulnerabilit...
PT-2025-22666 · Unknown · Hospital Management System In Php
Name of the Vulnerable Software and Affected Versions: Hospital Management System In PHP version 4.0 Description: The issue allows a remote attacker to execute arbitrary code via the "hms/doctor/edit-profile.php" file. This could potentially lead to unauthorized access and control of the system...
