bangkokhospital.com Cross Site Scripting vulnerability OBB-2119055

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

HealthNode Hospital Management System SQL Injection Vulnerability

HealthNode Hospital Management System is a hospital management system. The system includes functions such as patient information management, ward management, surgery schedule management and financial management. HealthNode Hospital Management System suffers from a SQL injection vulnerability, whi...

PHPGurukul Hospital Management System Cross-Site Scripting Vulnerability (CNVD-2021-68753)

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. PHPGurukul Hospital Management System is vulnerable to cross-site scripting, which can be exploited by attackers to execute js code via prescribe.php...

Hospital Management System Cross Site Scripting

Exploit Title: XSS-Stored PHPSESSID user PWNED on Hospital Management System Vulnerable parameter "txtMsg" on contact Author: nu11secur1ty Testing and Debugging: nu11secur1ty Date: 08.17.2021 Vendor: https://github.com/kishan0725/Hospital-Management-System Link:...

PHPGurukul Hospital Management System has an unspecified vulnerability

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. a security vulnerability exists in PHPGurukul Hospital Management System, which originates from admin-panel1.php in the software, which can delete unauthenticated authenticated physician entries. No details...

CVE-2021-38754

SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php...

CVE-2021-38757

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through contact.php...

CVE-2021-38755

Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php...

CVE-2021-38756

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through prescribe.php...

Design/Logic Flaw

Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php...

CVE-2021-38757

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through contact.php...

Sql injection

SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php...

CVE-2021-38756

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through prescribe.php...

Cross site scripting

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through prescribe.php...

Cross site scripting

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through contact.php...

CVE-2021-38755

Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php...

CVE-2021-38757

CVE-2021-38757 is a reported persistent cross-site scripting (XSS) vulnerability in a Hospital Management System (often referenced as PHPGurukul/Hospital Management System). The public descriptions consistently state that the XSS is targeted at the web admin via the contact.php endpoint. Exploit ...

CVE-2021-38757

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through contact.php...

CVE-2021-38756

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through prescribe.php...

CVE-2021-38756

CVE-2021-38756: Persistent cross-site scripting in Hospital Management System (PHPGurukul) via prescribe.php affecting web admin. Descriptions indicate the vulnerability enables execution of JavaScript through input on prescribe.php; root cause not explicitly stated in provided documents. CVSS sc...