357 matches found
CVE-2022-35117
CVE-2022-35117 affects Clinic's Patient Management System v1.0. The vulnerability is a cross-site scripting (XSS) flaw exploitable via update_medicine_details.php, where an attacker can inject a crafted payload into the Packing text box in the Update Medical Details module to execute arbitrary we...
Clinic’s Patient Management System 跨站脚本漏洞
Clinic's Patient Management System is a patient management system for a clinic by Carlo Montero. A security vulnerability exists in Clinic's Patient Management System version v1.0, which originates from a cross-site scripting XSS vulnerability contained via updatemedicinedetails.php that allows a...
CVE-2022-35117: Improper Neutralization of Input During Web Page Generation
Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...
CVE-2022-36242
Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/updatemedicine.php?id=...
CVE-2022-36242
Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/updatemedicine.php?id=...
CVE-2022-36242
Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/updatemedicine.php?id=...
Sql injection
Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/updatemedicine.php?id=...
CVE-2022-36242
Clinic's Patient Management System v1.0 is affected by an SQL Injection via /pms/update_medicine.php?id= (root cause: unsafely handled id parameter). The CVE entries (CVE-2022-36242) cite a high-severity impact (CVSS 3.1 base 9.8; Confidentiality, Integrity, Availability all High) with network ac...
CVE-2022-36242
Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/updatemedicine.php?id=...
Clinic‘s Patient Management System SQL注入漏洞
Clinic's Patient Management System is a patient management system for a clinic by Carlo Montero. A security vulnerability exists in Clinic's Patient Management System v1.0, which can be exploited to construct special strings for SQL injection...
PT-2022-23271 · Unknown · Clinic'S Patient Management System
Name of the Vulnerable Software and Affected Versions: Clinic's Patient Management System version 1.0 Description: The issue is related to SQL Injection via the "/pms/update medicine.php?id=" endpoint. This allows for potential manipulation of database queries using the id variable...
CVE-2022-36242: Improper Neutralization of Special Elements used in an SQL Command
Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/updatemedicine.php?id=...
CVE-2022-36750
Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/updateuser.php?id=...
CVE-2022-36750
Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/updateuser.php?id=...
CVE-2022-36750
Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/updateuser.php?id=...
CVE-2022-36270
Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php...
CVE-2022-36270
Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php...
CVE-2022-36270
Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php...