3045 matches found
CVE-2020-26627
CVE-2020-26627 : Concrete details show a Time-Based SQL Injection in Hospital Management System V4.0 and earlier, exploitable via the adminremark field under “Contact Us Queries -> Unread Query.” The root cause is lack of input validation for externally entered SQL statements, enabling an atta...
PHPGurukul Hospital Management System SQL Injection Vulnerability
PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A SQL injection vulnerability exists in PHPGurukul Hospital Management System version 1.0, which originates from a SQL injection vulnerability in the mobnum parameter of the admin/contact.php page...
PHPGurukul Hospital Management System SQL Injection Vulnerability
PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A SQL injection vulnerability exists in PHPGurukul Hospital Management System version 1.0, which originates from a SQL injection vulnerability in the cpass parameter of the admin/change-password.php page...
PHPGurukul Hospital Management System SQL Injection Vulnerability
PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A SQL injection vulnerability exists in PHPGurukul Hospital Management System version 1.0, which originates from a SQL injection vulnerability in the adminremark parameter of the admin/query-details.php pag...
PHPGurukul Hospital Management System Security Vulnerability
PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A security vulnerability exists in version 1.0 of the PHPGurukul Hospital Management System, which is caused by an SQL injection vulnerability in the searchdata parameter of the admin/patient-search.php pag...
CVE-2020-26627
A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries - Unread Query' tab...
PHPGurukul Hospital Management System SQL Injection Vulnerability
PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A SQL injection vulnerability exists in PHPGurukul Hospital Management System version 1.0, which originates from a SQL injection vulnerability in the doctorspecilization parameter of the...
PT-2024-15496 · Unknown · Phpgurukul Hospital Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Hospital Management System. The issue is related to an unknown function in the file admin/contact.php, where the...
CVE-2024-0286
A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file index.phpcontactus of the component Contact Form. The manipulation of the argument Name/Email/Message leads to cross site scripting. It is possibl...
CVE-2024-0286
A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file index.phpcontactus of the component Contact Form. The manipulation of the argument Name/Email/Message leads to cross site scripting. It is possibl...
Cross site scripting
A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file index.phpcontactus of the component Contact Form. The manipulation of the argument Name/Email/Message leads to cross site scripting. It is possibl...
CVE-2024-0286 PHPGurukul Hospital Management System Contact Form index.php#contact_us cross site scripting
A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file index.phpcontactus of the component Contact Form. The manipulation of the argument Name/Email/Message leads to cross site scripting. It is possibl...
CVE-2024-0286
PHPGurukul Hospital Management System 1.0 contains a cross-site scripting vulnerability in the Contact Form (index.php#contact_us). The issue arises from manipulating the Name/Email/Message fields, allowing remote exploitation and with public disclosure of the exploit (VDB-249843). Multiple sourc...
CVE-2024-0286 PHPGurukul Hospital Management System Contact Form index.php#contact_us cross site scripting
A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file index.phpcontactus of the component Contact Form. The manipulation of the argument Name/Email/Message leads to cross site scripting. It is possibl...
CVE-2024-0268
A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age/city leads to sql injection. The atta...
CVE-2024-0268
A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age/city leads to sql injection. The atta...
Sql injection
A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age/city leads to sql injection. The atta...
CVE-2024-0268
CVE-2024-0268 affects Kashipara Hospital Management System (versions up to 1.0). The vulnerability is in the registration.php functionality where manipulating arguments name, email, pass, gender, age, or city enables SQL injection. Reported to be exploitable remotely with public disclosure. No pa...
CVE-2024-0268 Kashipara Hospital Management System registration.php sql injection
A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age/city leads to sql injection. The atta...
CVE-2024-0268 Kashipara Hospital Management System registration.php sql injection
A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age/city leads to sql injection. The atta...