CVE-2023-41523

Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php...

CVE-2023-41521

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters...

CVE-2023-41532

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...

CVE-2023-41532

Hospital Management System v4 is vulnerable to a SQL injection vulnerability due to the incorrect manipulation of the doctor_contact parameter within the doctorsearch.php file. An attacker could exploit this flaw to execute unauthorized SQL commands. As a temporary workaround, it is recommended t...

CVE-2023-41532

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...

CVE-2023-41530

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...

CVE-2023-41526

The Hospital Management System v4 contains multiple SQL injection vulnerabilities within the func1.php file. The root cause is the improper manipulation and lack of sanitization of the username3 and password3 parameters. Successful exploitation could allow an attacker to perform unauthorized acti...

CVE-2023-41525

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...

PT-2025-32294 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: A SQL injection vulnerability exists in the Patient Search Module of the Hospital Management System. The vulnerability is located in the patient contact parameter of the patientsearch.php file...

CVE-2023-41525

The Hospital Management System v4 (developed by Kishan Lal) contains a SQL injection vulnerability in the Patient Search Module . The root cause is the incorrect manipulation of the patient_contact parameter within the patientsearch.php file. This vulnerability allows an attacker to execute unaut...

CVE-2023-41525

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...

PT-2025-32301 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection due to the doctor contact parameter in the doctorsearch.php file. Recommendations: As a temporary workaround, consider...

CVE-2023-41527

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...

CVE-2023-41527

Hospital Management System v4 contains a SQL injection vulnerability (CWE-89) located in the func.php file. The flaw exists because the password2 parameter is not properly sanitized or validated before being used in a database query. This vulnerability could allow an attacker to perform unauthori...

CVE-2023-41527

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...

PT-2025-32292 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to a SQL injection issue through the username parameter located at the /index.php API endpoint. Recommendations: As a temporar...

CVE-2023-41524

Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...

PT-2025-32288 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createClassArms.php file. These flaws are present through the classId and...

CVE-2023-41520

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters...

CVE-2023-40992

The Hospital Management System version 4 is vulnerable to a SQL injection vulnerability (CWE-89) caused by insufficient input validation. The flaw exists in the /Hospital-Management-System-master/func.php file when processing the password2 parameter. Exploitation could lead to unauthorized access...