3042 matches found
Sql injection
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/rooms/manageroom.php?id=...
Sql injection
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deletepatientadmission...
Sql injection
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deleteroom...
Sql injection
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=patients/viewpatient&id=...
CVE-2022-32337
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/patients/managepatient.php?id=...
CVE-2022-32337
CVE-2022-32337 affects Hospital's Patient Records Management System v1.0. The flaw is a SQL injection in /hprms/admin/patients/manage_patient.php?id= caused by missing input validation. Impact is stated as potential exposure of sensitive data (CVE details and CNVD/Red Hat entries align on SQLi), ...
CVE-2022-32338
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/doctors/managedoctor.php?id=...
CVE-2022-32338
CVE-2022-32338 affects the Hospital's Patient Records Management System v1.0. The issue is a SQL Injection in /hprms/admin/doctors/manage_doctor.php?id= caused by insufficient input validation on external input. The vulnerability can enable attackers to execute arbitrary SQL commands against the ...
CVE-2022-32339
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/doctors/viewdoctor.php?id=...
CVE-2022-32339
The CVE-2022-32339 entry relates to Hospital's Patient Records Management System v1.0, where a SQL injection flaw exists in /hprms/admin/doctors/view_doctor.php?id= due to insufficient input validation. Multiple connected sources (CNVD/CNNVD/Red Hat/NVD/CVE records) corroborate that the vulnerabi...
CVE-2022-32340
CVE-2022-32340 affects Sourcecodester Hospital Patient Records Management System (HPRMS) v1.0. A SQL Injection flaw is exposed in the admin page, specifically /hprms/admin/?page=patients/view_patient&id=, caused by insufficient input validation. This allows attackers to manipulate SQL queries, po...
CVE-2022-32340
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=patients/viewpatient&id=...
CVE-2022-32341
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=user/manageuser&id=...
CVE-2022-32341
CVE-2022-32341 affects Hospital's Patient Records Management System v1.0. The vulnerability is SQL Injection reachable via /hprms/admin/?page=user/manage_user&id=, due to insufficient input validation in that parameter. Public sources in connected documents describe risk of unauthorized database ...
CVE-2022-32342
CVE-2022-32342 affects Hospital's Patient Records Management System v1.0. The vulnerability is SQL injection via /hprms/admin/room_types/view_room_type.php?id=, caused by lack of input validation in the SQL statement. Potential impact: exposure/ theft of sensitive database data. The provided docu...
CVE-2022-32342
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/roomtypes/viewroomtype.php?id=...
CVE-2022-32343
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via hprms/admin/roomtypes/manageroomtype.php?id=...
CVE-2022-32343
The CVE-2022-32343 entry applies to Hospital’s Patient Records Management System v1.0, where the web application’s SQL injection vulnerability arises in the room type management page (hprms/admin/room_types/manage_room_type.php?id=). The root cause is lack of input validation for the id parameter...
CVE-2022-32344
The CVE-2022-32344 issue affects Hospital's Patient Records Management System v1.0. A SQL Injection vulnerability resides in /hprms/classes/Master.php?f=delete_patient, as described across multiple documents (CNVD/CVE records). The root cause is lack of validation of externally entered SQL statem...