Hospital Management System Cross-Site Scripting Vulnerability (CNVD-2022-67484)

HealthNode Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A cross-site scripting vulnerability exists in Hospital Management System v1.0, which stems from t...

CVE-2022-25408

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the dpassword parameter at /admin-panel1.php...

CVE-2022-25409

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...

CVE-2022-25409

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...

CVE-2022-25408

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the dpassword parameter at /admin-panel1.php...

CVE-2022-25407

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Doctor parameter at /admin-panel1.php...

CVE-2022-25407: Improper Neutralization of Input During Web Page Generation

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Doctor parameter at /admin-panel1.php...

PT-2022-17270

Name of the Vulnerable Software and Affected Versions Hospital Management System version 1.0 Description The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the Doctor parameter at the "/admin-panel1.php" API endpoint. Recommendations F...

CVE-2022-25408: Improper Neutralization of Input During Web Page Generation

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the dpassword parameter at /admin-panel1.php...

CVE-2022-25409: Improper Neutralization of Input During Web Page Generation

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...

PT-2022-17272

Name of the Vulnerable Software and Affected Versions Hospital Management System version 1.0 Description The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the demail parameter at the "/admin-panel1.php" API endpoint. Recommendations F...

PT-2022-17271

Name of the Vulnerable Software and Affected Versions Hospital Management System version 1.0 Description The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the dpassword parameter at the "/admin-panel1.php" API endpoint. Recommendation...

PHPGurukul Hospital Management System has an unspecified vulnerability

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. a security vulnerability exists in PHPGurukul Hospital Management System, which originates from admin-panel1.php in the software, which can delete unauthenticated authenticated physician entries. No details...

CVE-2021-38755

Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php...

CVE-2021-38755: Missing Authorization

Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php...

PT-2021-22284

Name of the Vulnerable Software and Affected Versions Hospital Management System affected versions not specified Description The issue concerns unauthenticated doctor entry deletion in the Hospital Management System, specifically affecting the admin-panel1.php file. Recommendations At the moment,...

Hospital Management System 安全漏洞

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. a security vulnerability exists in PHPGurukul Hospital Management System, which originates from admin-panel1.php in the software, which can delete unauthenticated authenticated physician entries. No details...