SourceCodester Hospitals Patient Records Management System SQL注入漏洞

SourceCodester Hospitals Patient Records Management System is an open-source hospital medical record management system developed by SourceCodester. Version 1.0 of the SourceCodester Hospitals Patient Records Management System contains a SQL injection vulnerability. This vulnerability stems from...

CVE-2026-9342: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. Impacted is an unknown function of the file /admin/patients/viewhistory.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has be...

PT-2025-10893

Name of the Vulnerable Software and Affected Versions: Openmrs version 2.4.3 Build 0ff0ed Description: A stored cross-scripting XSS issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the personName.middleName parameter at the...

CVE-2025-25925

A stored cross-scripting XSS vulnerability in Openmrs v2.4.3 Build 0ff0ed allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the personName.middleName parameter at /openmrs/admin/patients/shortPatientForm.form...

PT-2022-21240

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/hprms/admin/patients/manage patient.php" endpoint, specifically affecting the id parameter. This vulnerability allo...