1862 matches found
PT-2025-22665 · Unknown · Phpgurukul Medical Card Generation System
Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Medical Card Generation System version 1.0 Description: The issue concerns stored cross-site scripting XSS vulnerabilities in the /admin/card-bwdates-report.php component. Attackers can execute arbitrary web scripts or HTML by...
CVE-2024-48704
CVE-2024-48704 affects Phpgurukul Medical Card Generation System v1.0. The issue is an HTML injection in admin/contactus.php via the pagedes parameter, caused by insufficient input filtering/escaping. Potential for injecting Web script/HTML (per CNVD/CNNVD entries); no exploit details provided in...
CVE-2024-48704
Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in admin/contactus.php via the parameter pagedes...
CVE-2024-51107
Multiple stored cross-site scripting XSS vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the pagetitle, pagedes, and emai...
PT-2025-22805 · Unknown · Phpgurukul Medical Card Generation System
Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Medical Card Generation System version 1.0 Description: A reflected cross-site scripting XSS issue exists in the mcgs/download-medical-cards.php component, allowing attackers to execute arbitrary code in the context of a user's...
CVE-2024-51107
PHPGURUKUL Medical Card Generation System v1.0 contains stored XSS in /mcgs/admin/contactus.php (parameters pagetitle, pagedes, email). The vulnerability is triggered via crafted payloads and can lead to arbitrary script execution; CVSS 3.1 base score 4.8 (Medium) with network access, high privil...
CVE-2024-51099
The CVE-2024-51099 entry concerns PHPGURUKUL Medical Card Generation System v1.0, specifically the mcgs/download-medical-cards.php component. The vulnerability is a reflected cross-site scripting (XSS) flaw triggered by injecting a payload into the searchdata parameter, allowing code execution in...
CVE-2024-51108
Multiple stored cross-site scripting XSS vulnerabilities in the component /admin/card-bwdates-report.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the fromdate and todate...
CVE-2024-51099
A reflected cross-site scripting XSS vulnerability in the component mcgs/download-medical-cards.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the searchda...
PHPGurukul Medical Card Generation System 安全漏洞
PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul. A security vulnerability exists in PHPGurukul Medical Card Generation System v1.0, which is caused by a reflective cross-site scripting attack in the searchdata parameter of the...
CVE-2024-51099
A reflected cross-site scripting XSS vulnerability in the component mcgs/download-medical-cards.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the searchda...
PHPGurukul Medical Card Generation System 安全漏洞
Medical Card Generation System is a medical card generation system. The Medical Card Generation System suffers from an HTML injection vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the pagedes parameter of admin/contactus.php, which can be...
PHPGurukul Medical Card Generation System 安全漏洞
PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A security vulnerability exists in version v1.0 of the PHPGurukul Medical Card Generation System, which is caused by a stored cross-site scripting attack in the pagetitle, pagedes, and email...
CVE-2024-51108
Multiple stored cross-site scripting XSS vulnerabilities in the component /admin/card-bwdates-report.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the fromdate and todate...
CVE-2024-51108
The CVE-2024-51108 entries describe stored XSS in PHPGURUKUL Medical Card Generation System v1.0, specifically the /admin/card-bwdates-report.php component. The vulnerability arises from unsafely handling user-supplied input in the fromdate and todate parameters, enabling attackers to inject payl...
CVE-2022-2693
A vulnerability has been found in SourceCodester Electronic Medical Records System and classified as critical. This vulnerability affects unknown code of the file register.php of the component UPDATE Statement Handler. The manipulation of the argument pconsultation leads to sql injection. The...
CVE-2022-28533
Sourcecodester Medical Hub Directory Site 1.0 is vulnerable to SQL Injection via /mhds/clinic/viewdetails.php...
CVE-2022-35117
Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...
CVE-2022-38765
Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter...