3042 matches found
Sourcecodester Hospital Patient Records Management System SQL注入漏洞(CNVD-2022-48763)
Sourcecodester Hospital Patient Records Management System is a web-based application that provides an automated platform for hospitals to store and manage their patient records. sourcecodester Hospital Patient Record Management System v1.0 is vulnerable to SQL injection. The vulnerability is caus...
HealthNode Hospital Management System 跨站脚本漏洞
Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A cross-site scripting vulnerability exists in Hospital Management System v1.0, which stems from the lack of...
HealthNode Hospital Management System跨站脚本漏洞
HealthNode Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A cross-site scripting vulnerability exists in Hospital Management System v1.0, which stems from t...
CVE-2022-24232
A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-24232
A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25003
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/viewdoctor.php...
CVE-2022-25003
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/viewdoctor.php...
CVE-2022-25004
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/managedoctor.php...
CVE-2022-25004
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/managedoctor.php...
CVE-2022-24232
A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25004
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/managedoctor.php...
CVE-2022-25003
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/viewdoctor.php...
Sql injection
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/managedoctor.php...
Remote file inclusion
A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
Sql injection
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/viewdoctor.php...
CVE-2022-25004
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/managedoctor.php...
CVE-2022-25004
The CVE-2022-25004 entry concerns Hospital Patient Record Management System v1.0, which is vulnerable to SQL injection via the id parameter in /admin/doctors/manage_doctor.php. The vulnerability arises from unsanitized user input embedded in a SQL query, enabling an attacker to manipulate the dat...
CVE-2022-25003
CVE-2022-25003 concerns a SQL injection in Hospital Patient Record Management System v1.0, via the id parameter of /admin/doctors/view_doctor.php. The root cause is lack of input validation on external input, enabling attackers to manipulate SQL commands and potentially access or exfiltrate sensi...
CVE-2022-24232
A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-24232
CVE-2022-24232 concerns a local file inclusion vulnerability in Hospital Patient Record Management System v1.0 that enables arbitrary code execution via a crafted PHP file. The affected component is the web application’s handling of file paths, allowing an attacker to include local PHP files and ...