CVE-2022-36609

Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/updatepatient.php...

CVE-2022-40471

Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php...

CVE-2022-36270

Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php...

CVE-2022-36251

Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting XSS via patients.php...

CVE-2022-36750

Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/updateuser.php?id=...

CVE-2022-36242

Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/updatemedicine.php?id=...

CVE-2022-2297

A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/updateuser.php?userid=1. The manipulation of the argument profilepicture with the input leads to unrestricted upload. It is possib...

CVE-2022-35117

Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...

CVE-2021-38152

index.php/appointment/insertpatientaddappointment in Chikitsa Patient Management System 2.0.0 allows XSS...

CVE-2021-38149

index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...

CVE-2021-38151

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...

📄 Clinic's Patient Management System 1.0 SQL Injection / Remote Code Execution

This Metasploit module exploits an SQL injection vulnerability in the login portal, allowing an attacker to log in as an admin. Next, it allows the attacker to upload malicious files through user modification to achieve remote code execution. This module requires Metasploit:...

CVE-2025-3096

Clinic’s Patient Management System versions 2.0 suffers from a SQL injection vulnerability in the login page...

CVE-2025-3096

Clinic’s Patient Management System versions 2.0 suffers from a SQL injection vulnerability in the login page...

CVE-2025-3096

Clinic’s Patient Management System 2.0 is described as having a SQL injection in the login page. The connected PacketStorm item documents a proof-of-concept combining SQL injection authentication bypass with an unrestricted file upload to achieve full compromise, i.e., unauthenticated access and ...

CVE-2025-3096 Clinics Patient Management System SQL Injection

Clinic’s Patient Management System versions 2.0 suffers from a SQL injection vulnerability in the login page...

CVE-2025-3096 Clinics Patient Management System SQL Injection

Clinic’s Patient Management System versions 2.0 suffers from a SQL injection vulnerability in the login page...

PT-2025-14380 · Unknown · Clinic'S Patient Management System

Name of the Vulnerable Software and Affected Versions: Clinic’s Patient Management System version 2.0 Description: The issue is related to a SQL injection vulnerability in the login page. Recommendations: For Clinic’s Patient Management System version 2.0, update to a version that fixes the SQL...

Clinic’s Patient Management System SQL注入漏洞

Clinic's Patient Management System is a patient management system for a clinic in Carlo Montero. A security vulnerability exists in Clinic's Patient Management System version 2.0, which originates from a SQL injection vulnerability on the login page...

WordPress plugin KiviCare – Clinic & Patient Management System (EHR) SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...