Sql injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22176

PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas. Remote unauthenticated users can exploit the vulnerability to obtain user sensitive information...

CVE-2020-22176

The CVE-2020-22176 entry concerns PHPGurukul Hospital Management System in PHP v4.0 with a sensitive information disclosure vulnerability across multiple areas. The connected records confirm that remote unauthenticated attackers can exploit this flaw to obtain sensitive user information. Details ...

CVE-2020-22170

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\getdoctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22170

CVE-2020-22170 affects PHPGurukul Hospital Management System v4.0. A SQL injection vulnerability exists in hms\get_doctor.php that allows remote unauthenticated attackers to extract sensitive data from the database. Root cause is unsafe handling of user input in the SQL query. Affected component ...

CVE-2020-22164

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\checkavailability.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22164

PHPGurukul Hospital Management System v4.0 contains a SQL injection vulnerability in hms\check_availability.php that allows remote unauthenticated attackers to obtain sensitive information from the database. The issue is confirmed across multiple connected sources (e.g., Red Hat advisory, CNVD/CN...

CVE-2020-22165

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22165

Summary: CVE-2020-22165 affects PHPGurukul Hospital Management System v4.0. The vulnerability is a SQL injection in the hms\user-login.php page that allows remote, unauthenticated attackers to obtain sensitive data from the database. What’s affected: PHPGurukul Hospital Management System in PHP v...

CVE-2020-22166

The CVE-2020-22166 entry concerns the PHPGurukul Hospital Management System (HM S) version 4.0, where a SQL injection exists in the \hms\forgot-password.php. The vulnerability allows remote unauthenticated attackers to retrieve sensitive database information. Multiple connected sources confirm th...

CVE-2020-22166

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\forgot-password.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22167

PHPGurukul Hospital Management System in PHP v4.0 has a Persistent Cross-Site Scripting vulnerability in \hms\admin\appointment-history.php. Remote registered users can exploit the vulnerability to obtain user cookie data...

CVE-2020-22167

PHPGurukul Hospital Management System v4.0 contains a persistent cross-site scripting (XSS) vulnerability in hms/admin/appointment-history.php. The issue allows remote registered users to exploit the page to obtain user cookie data, indicating an information disclosure risk via stored or reflecte...

CVE-2020-22168

CVE-2020-22168 concerns the PHPGurukul Hospital Management System v4.0, where a SQL injection exists in the file hms/change-emaild.php. The vulnerability allows remote, unauthenticated attackers to extract sensitive data from the database. Several connected sources corroborate the existence of a ...

CVE-2020-22168

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\change-emaild.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22169

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\appointment-history.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22169

CVE-2020-22169 affects PHPGurukul Hospital Management System v4.0. The vulnerability is a SQL injection in hms/appointment-history.php that can be exploited remotely by unauthenticated users to obtain sensitive database information. Underlying cause is improper handling of user-supplied input in ...

CVE-2020-22171

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\registration.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22171

PHPGurukul Hospital Management System v4.0 is affected by a SQL injection in hms\registration.php, exploitable by remote unauthenticated users to obtain sensitive DB information. Multiple sources corroborate the vulnerability in PHPGurukul Hospital Management System 4.0. Exploitation details are ...

CVE-2020-22172

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\getdoctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...