Sql injection

Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/updatepatient.php...

CVE-2022-36609

Clinic's Patient Management System v1.0 contains a SQL injection vulnerability in the id parameter of /pms/update_patient.php, due to lack of input validation for external SQL statements. The affected component is the pms update endpoint, enabling attackers to potentially execute arbitrary SQL an...

CVE-2022-36609

Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/updatepatient.php...

Clinic’s Patient Management System SQL注入漏洞

Clinic's Patient Management System is a patient management system for clinics. a SQL injection vulnerability exists in Clinic's Patient Management System v1.0, which originates in /pms/ The id parameter in updatepatient.php lacks validation for external input SQL statements. An attacker could use...

PT-2022-23503 · Unknown · Clinic'S Patient Management System

Name of the Vulnerable Software and Affected Versions: Clinic's Patient Management System version 1.0 Description: A SQL injection issue was found in the system, specifically via the id parameter at the "/pms/update patient.php" API endpoint. Recommendations: For Clinic's Patient Management Syste...

CVE-2022-36609: Improper Neutralization of Special Elements used in an SQL Command

Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/updatepatient.php...

CVE-2022-36251

Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting XSS via patients.php...

CVE-2022-36251

Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting XSS via patients.php...

CVE-2022-36251

Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting XSS via patients.php...

Cross site scripting

Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting XSS via patients.php...

CVE-2022-36251

Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting XSS via patients.php...

CVE-2022-36251

CVE-2022-36251 affects Clinic's Patient Management System v1.0 with a Cross Site Scripting (XSS) vulnerability in patients.php. The issue arises from improper handling of input, enabling injection of scripts by an attacker. CVSSv3.1 base score 6.1 (Medium) with network attack vector, low attack c...

CVE-2022-36251: Improper Neutralization of Input During Web Page Generation

Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting XSS via patients.php...

PT-2022-23272 · Unknown · Clinic'S Patient Management System

Name of the Vulnerable Software and Affected Versions: Clinic's Patient Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the patients.php file. This means that an attacker could potentially inject malicious scripts into the website, which could then ...

Clinic’s Patient Management System 跨站脚本漏洞

Clinic's Patient Management System is a patient management system for a clinic by Carlo Montero. A security vulnerability exists in Clinic's Patient Management System version v1.0, which stems from a cross-site scripting XSS vulnerability in patient.php...

CVE-2022-35117

Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...

CVE-2022-35117

Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...

CVE-2022-35117

Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...

Cross site scripting

Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...

CVE-2022-35117

Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...