3042 matches found
CVE-2023-40992
Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter...
CVE-2023-40992
Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter...
PT-2025-32295 · Unknown · Hospital Management System
Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple SQL injection flaws within the func1.php file. These flaws are present through the username3 and password3 parameters. Recommendations: Apply...
Hospital Management System 安全漏洞
Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of parameters username3 and password3 in file func1.php...
CVE-2023-41527
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...
CVE-2023-41526
CVE-2023-41526 affects Hospital Management System v4, with multiple SQL injection flaws in func1.php exposed via username3 and password3 parameters. Root cause: improper handling of user-supplied input leading to unauthenticated data access? and high risk per CVSS 3.1 metrics (CRITICAL, 9.8). Aff...
CVE-2023-41527
CVE-2023-41527 affects Hospital Management System v4 and is a SQL injection vulnerability in the password2 parameter of func.php. The issue arises from improper handling of user-supplied input, enabling attackers to manipulate SQL queries and potentially access or modify the database. Exploitatio...
CVE-2023-41529
Hospital Management System v4 was discovered to contain multiple cross-site scripting XSS vulnerabilities in func2.php via the fname and lname parameters...
CVE-2023-41530
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...
Hospital Management System 安全漏洞
Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of parameters username1 and password2 in file func3.php...
CVE-2023-41531
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...
CVE-2023-41528
CVE-2023-41528 concerns Hospital Management System v4, where the component in question is the file/endpoint responsible for contact handling. The vulnerability is described as multiple SQL injection flaws in contact.php triggered by the parameters txtname, txtphone, and txtmail. According to the ...
CVE-2023-41529
Hospital Management System v4 was discovered to contain multiple cross-site scripting XSS vulnerabilities in func2.php via the fname and lname parameters...
CVE-2023-41525
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...
CVE-2023-41529
CVE-2023-41529 affects Hospital Management System v4, with multiple cross-site scripting (XSS) vulnerabilities in the file func2.php triggered by the fname and lname parameters. The issue is confirmed across multiple sources in the connected documents, and the CVSSv3.1 base score is 6.1 (Medium) ...
CVE-2023-41531
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...
CVE-2023-41526
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters...
CVE-2023-41527
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...