3042 matches found
Authorization
Hospital Management System v1.0 was discovered to lack an authorization component, allowing attackers to access sensitive information and obtain the admin password...
CVE-2022-26546
CVE-2022-26546 affects Hospital Management System v1.0. The root cause is lack of an authorization component, enabling unauthorized access to sensitive data and the admin password. Descriptions across multiple sources corroborate that the vulnerability stems from missing access control rather tha...
CVE-2022-26546
Hospital Management System v1.0 was discovered to lack an authorization component, allowing attackers to access sensitive information and obtain the admin password...
CVE-2022-24136
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
CVE-2022-24136
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
CVE-2022-24136
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
Design/Logic Flaw
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
CVE-2022-24136
CVE-2022-24136 affects Hospital Management System v1.0 and involves an unrestricted file upload in treatmentrecord.php . An attacker can upload a PHP file and remotely execute code, enabling arbitrary code execution. Multiple connected sources (CNVD-2022-81375, NVD, Red Hat, CNVD variants) corrob...
CVE-2022-24136
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
PHPGurukul Hospital Management System 代码问题漏洞
Hospital Management System is a PHP and MySQL-based hospital management system. v1.0 of Hospital Management System is vulnerable to a file upload vulnerability that results from a lack of validation of uploaded files in treatmentrecord.php. An attacker could exploit this vulnerability to upload...
PHPGurukul Hospital Management System 安全漏洞
Hospital Management System is a PHP and MySQL-based hospital management system. v1.0 of Hospital Management System is vulnerable to unauthorized access, which stems from a missing authorization component that could be exploited to access sensitive information and obtain administrator passwords...
Sourcecodester Hospital Patient Records Management System跨站脚本漏洞（CNVD-2022-48761）
Sourcecodester Hospital Patient Records Management System is a Web-based application that provides an automated platform for hospitals to store and manage their patient records. A cross-site scripting vulnerability exists in version 1.0, which stems from the lack of proper validation of client-si...
CVE-2022-26244
A stored cross-site scripting XSS vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "special" field...
CVE-2022-26244
A stored cross-site scripting XSS vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "special" field...
CVE-2022-26244
A stored cross-site scripting XSS vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "special" field...
Cross site scripting
A stored cross-site scripting XSS vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "special" field...
CVE-2022-26244
A stored cross-site scripting XSS vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "special" field...
CVE-2022-26244
CVE-2022-26244 describes a stored XSS in Hospital Patient Record Management System v1.0 where an attacker can inject a payload into the "special" field to execute scripts. Public sources consistently attribute the vulnerability to insufficient input validation on the client-side/web application, ...
Sourcecodester Hospital Patient Records Management System 跨站脚本漏洞
Sourcecodester Hospital Patient Records Management System is a Web-based application that provides an automated platform for hospitals to store and manage their patient records. A cross-site scripting vulnerability exists in version 1.0, which stems from the lack of proper validation of client-si...