Lucene search
+L

16 matches found

NVD
NVD
•added 2026/05/24 5:16 a.m.•28 views

CVE-2026-9355

A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=savepatienthistory. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely...

7.5CVSS0.00411EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/05/24 4:45 a.m.•28 views

EUVD-2026-31569

A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=savepatienthistory. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/05/24 4:45 a.m.•19 views

CVE-2026-9355 SourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injection

A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=savepatienthistory. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/05/24 4:45 a.m.•32 views

CVE-2026-9355

A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=savepatienthistory. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
•added 2026/05/24 12:00 a.m.•21 views

SourceCodester Hospitals Patient Records Management System SQL注入漏洞

SourceCodester Hospitals Patient Records Management System is an open-source hospital medical record management system developed by SourceCodester. Version 1.0 of the SourceCodester Hospitals Patient Records Management System has a SQL injection vulnerability. This vulnerability arises from...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2021-27552

Malicious code in bioql PyPI...

6.5CVSS6.7AI score0.01649EPSS
SaveExploits1References2
OSV
OSV
•added 2024/07/22 4:15 a.m.•10 views

CVE-2024-6969

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/getpatienthistory.php. The manipulation of the argument patientid leads to sql injection. The attack may be initiated...

7.5CVSS5.8AI score0.00401EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/07/22 12:00 a.m.•20 views

PT-2024-38008 · Sourcecodester · Sourcecodester Clinics Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System version 1.0 Description: A critical issue affects the processing of the file /ajax/get patient history.php, where the manipulation of the patient id argument leads to sql injection. The attack...

7.5CVSS6.9AI score0.00401EPSS
SaveExploits1References9
attackerkb
attackerkb
•added 2022/06/22 8:15 a.m.•13 views

CVE-2022-23056

In ERPNext, versions v13.0.0-beta.13 through v13.30.0 are vulnerable to Stored XSS at the Patient History page which allows a low privilege user to conduct an account takeover attack...

3.5CVSS5.8AI score0.00852EPSS
SaveExploits1References3
NVD
NVD
•added 2022/06/22 8:15 a.m.•27 views

CVE-2022-23056

In ERPNext, versions v13.0.0-beta.13 through v13.30.0 are vulnerable to Stored XSS at the Patient History page which allows a low privilege user to conduct an account takeover attack...

3.5CVSS0.00852EPSS
SaveExploits1References2
Prion
Prion
•added 2022/06/22 8:15 a.m.•23 views

Design/Logic Flaw

In ERPNext, versions v13.0.0-beta.13 through v13.30.0 are vulnerable to Stored XSS at the Patient History page which allows a low privilege user to conduct an account takeover attack...

3.5CVSS5.9AI score0.00852EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2022/06/22 7:25 a.m.•25 views

CVE-2022-23056 ERPNext - Stored XSS leads to account takover

In ERPNext, versions v13.0.0-beta.13 through v13.30.0 are vulnerable to Stored XSS at the Patient History page which allows a low privilege user to conduct an account takeover attack...

6AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/22 12:00 a.m.•4 views

CVE-2022-23056: Improper Neutralization of Input During Web Page Generation

In ERPNext, versions v13.0.0-beta.13 through v13.30.0 are vulnerable to Stored XSS at the Patient History page which allows a low privilege user to conduct an account takeover attack...

3.5CVSS5.7AI score0.00852EPSS
SaveExploits1References2
OSV
OSV
•added 2022/06/14 4:15 p.m.•17 views

CVE-2022-32349

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deletepatienthistory...

7.2CVSS5.8AI score0.00956EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/14 4:15 p.m.•9 views

CVE-2022-32349

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deletepatienthistory...

7.2CVSS5.8AI score0.00956EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/14 12:00 a.m.•14 views

Patient Records Management System SQL注入漏洞

Sourcecodester Hospital Patient Records Management System is a web-based application that provides an automated platform for hospitals to store and manage their patient records. Management System is vulnerable to a SQL injection vulnerability that originates in the...

7.2CVSS6AI score0.00956EPSS
SaveExploits1References2
Rows per page
Query Builder