Lucene search
+L

3042 matches found

Patchstack
Patchstack
added 2025/05/20 11:43 a.m.17 views

WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Jingle Bells in WordPress Plugin Hospital Management System versions = 47.020-11-2023...

9.9CVSS6.8AI score0.00407EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/05/19 8:15 p.m.20 views

CVE-2025-39393

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla Hospital Management System hospital-management allows Reflected XSS.This issue affects Hospital Management System: from n/a through = 47.020-11-2023...

7.1CVSS0.00224EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/19 8:15 p.m.17 views

CVE-2025-39386

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla Hospital Management System hospital-management allows SQL Injection.This issue affects Hospital Management System: from n/a through = 47.020-11-2023...

9.3CVSS0.00343EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/19 8:15 p.m.17 views

CVE-2025-39380

Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System hospital-management allows Upload a Web Shell to a Web Server.This issue affects Hospital Management System: from n/a through = 47.020-11-2023...

10CVSS0.00421EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/19 8:15 p.m.13 views

CVE-2025-39357

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla Hospital Management System hospital-management allows SQL Injection.This issue affects Hospital Management System: from n/a through = 47.020-11-2023...

8.5CVSS0.00313EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/19 7:43 p.m.40 views

CVE-2025-39357

CVE-2025-39357 is a SQL Injection vulnerability in the WordPress plugin “Hospital Management System” (mojoomla Hospital Management System) affecting versions up to 47.0 (as of 2023-11-20). The issue arises from improper neutralization of special elements in SQL commands. The CVSSv3.1 base score i...

8.5CVSS7.3AI score0.00313EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/19 7:43 p.m.22 views

CVE-2025-39357 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla Hospital Management System hospital-management allows SQL Injection.This issue affects Hospital Management System: from n/a through = 47.020-11-2023...

8.5CVSS0.00313EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/19 7:43 p.m.6 views

CVE-2025-39357 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla Hospital Management System allows SQL Injection.This issue affects Hospital Management System: from n/a through 47.020-11-2023...

8.5CVSS7.6AI score0.00313EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/19 7:36 p.m.9 views

CVE-2025-39380 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System hospital-management allows Upload a Web Shell to a Web Server.This issue affects Hospital Management System: from n/a through = 47.020-11-2023...

10CVSS8.5AI score0.00421EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/19 7:36 p.m.31 views

CVE-2025-39380 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System hospital-management allows Upload a Web Shell to a Web Server.This issue affects Hospital Management System: from n/a through = 47.020-11-2023...

10CVSS0.00421EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/19 7:36 p.m.48 views

CVE-2025-39380

CVE-2025-39380 corresponds to an Arbitrary/Unrestricted File Upload vulnerability in the WordPress plugin for Mojoomla Hospital Management System (Hospital Management System). Affected: mojoomla Hospital Management System WordPress plugin versions prior to 47.0 (up to 2023-11-20). Impact cited ac...

10CVSS7.2AI score0.00421EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/19 7:34 p.m.8 views

CVE-2025-39386 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla Hospital Management System allows SQL Injection.This issue affects Hospital Management System: from n/a through 47.020-11-2023...

9.3CVSS7.6AI score0.00343EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/19 7:34 p.m.45 views

CVE-2025-39386

CVE-2025-39386 corresponds to a SQL Injection in the WordPress Hospital Management System plugin, affecting versions = n/a up to 47.0 (20-11-2023). The vulnerability arises from improper neutralization of input in SQL commands. The CVSSv3.1 base score is 9.3 (CRITICAL); attack vector NETWORK, att...

9.3CVSS7.3AI score0.00343EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/19 7:34 p.m.25 views

CVE-2025-39386 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla Hospital Management System hospital-management allows SQL Injection.This issue affects Hospital Management System: from n/a through = 47.020-11-2023...

9.3CVSS0.00343EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/19 7:28 p.m.4 views

CVE-2025-39393 WordPress Hospital Management System plugin <= 47.0 (20-11-2023) - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla Hospital Management System allows Reflected XSS.This issue affects Hospital Management System: from n/a through 47.0 20-11-2023...

7.1CVSS7AI score0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/19 7:28 p.m.25 views

CVE-2025-39393 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla Hospital Management System hospital-management allows Reflected XSS.This issue affects Hospital Management System: from n/a through = 47.020-11-2023...

7.1CVSS0.00224EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/19 7:28 p.m.39 views

CVE-2025-39393

CVE-2025-39393 : Reflected Cross-Site Scripting in the WordPress plugin “Hospital Management System” (Mojoomla) for versions up to 47.0 (20-11-2023). Description from multiple sources confirms an improper input neutralization during web page generation leading to XSS. The CVSS v3.1 base score is ...

7.1CVSS7.2AI score0.00224EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/19 1:15 p.m.8 views

CVE-2025-4933

A vulnerability, which was classified as critical, was found in ponaravindb Hospital-Management-System 1.0. This affects an unknown part of the file /doctor-panel.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.7AI score0.00498EPSS
SaveExploits1References4
NVD
NVD
added 2025/05/19 1:15 p.m.19 views

CVE-2025-4933

A vulnerability, which was classified as critical, was found in ponaravindb Hospital-Management-System 1.0. This affects an unknown part of the file /doctor-panel.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS0.00498EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/05/19 1:00 p.m.32 views

CVE-2025-4933 ponaravindb Hospital-Management-System doctor-panel.php sql injection

A vulnerability, which was classified as critical, was found in ponaravindb Hospital-Management-System 1.0. This affects an unknown part of the file /doctor-panel.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS0.00498EPSS
SaveExploits1References4
Rows per page
Query Builder