CVE-2023-41531

CVE-2023-41531 affects Hospital Management System v4, with multiple SQL injection flaws in the vulnerable file func3.php, exploitable via the parameters username1 and password2. The issue enables unauthenticated or basic-privilege users to manipulate queries, consistent with a CVSS3.1 base score ...

PT-2025-32299 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection issue through the app contact parameter in the appsearch.php file. Recommendations: As a temporary workaround, consider...

PT-2025-32286 · Unknown · Hospital Management System Version 4

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: Hospital Management System version 4 is susceptible to a SQL injection due to insufficient input validation. The vulnerability exists in the /Hospital-Management-System-master/func.php file...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which is caused by a cross-site scripting attack due to incorrect manipulation of the parameters fname and lname in the file...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of the parameters txtname, txtphone and txtmail in the file...

PT-2025-32301 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection due to the doctor contact parameter in the doctorsearch.php file. Recommendations: As a temporary workaround, consider...

PT-2025-32297 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to multiple SQL injection flaws within the contact.php file. These flaws are triggered through the txtname, txtphone, and txtmail parameters...

PT-2025-32300 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple SQL injection vulnerabilities in the func3.php file. These vulnerabilities are present through the username1 and password2 parameters...

CVE-2023-40992

Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter...

PT-2025-32294 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: A SQL injection vulnerability exists in the Patient Search Module of the Hospital Management System. The vulnerability is located in the patient contact parameter of the patientsearch.php file...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which originates from a SQL injection due to incorrect manipulation of the parameter appcontact in the file appsearch.php...

CVE-2023-41532

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of the parameter patientcontact in the file patientsearch.php...

CVE-2023-40992

Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of the parameter doctorcontact in the file doctorsearch.php...

CVE-2023-41532

Hospital Management System v4 has a SQL injection vulnerability in the doctorsearch.php endpoint via the doctor_contact parameter. Affected component is the query construction in doctorsearch.php; root cause is lack of input sanitization. CVSS v3.1 base score 8.8 (HIGH) with network attack vector...

CVE-2023-41525

CVE-2023-41525 affects Hospital Management System v4, with a SQL injection in the Patient Search Module via the patient_contact parameter in patientsearch.php. The CVSS v3.1 vector shows Network access, no privileges, high impact on confidentiality, integrity, and availability (base score 9.8). S...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of parameter password2 in file func.php...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version 4, which originates from SQL injection due to incorrect manipulation of parameter password2 in file...

CVE-2023-41532

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...