CVE-2026-111990

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

CVE-2026-111990 kishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injection

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

CVE-2026-111990

The kishan0725 Hospital Management System (up to version 777fda46b77a820977a5ba616283dbfbc40bf7e1 ) is vulnerable to a SQL injection flaw. The issue resides in the Appointment Cancellation Handler component, specifically within the mysqli_query function of the admin-panel.php file. By manipulatin...

EUVD-2026-103673

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

CVE-2026-111990 kishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injection

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

CVE-2025-63512: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

CVE-2021-38316

The WP Academic People List WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the categoryname parameter in the /admin-panel.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.4.1...

CVE-2021-38316

The WP Academic People List WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the categoryname parameter in the /admin-panel.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.4.1...

CVE-2021-38316 WP Academic People List <= 0.4.1 Reflected Cross-Site Scripting

The WP Academic People List WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the categoryname parameter in the /admin-panel.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.4.1...

PT-2021-22033

Name of the Vulnerable Software and Affected Versions: WP Academic People List WordPress plugin versions up to and including 0.4.1 Description: The issue allows attackers to inject arbitrary web scripts via Reflected Cross-Site Scripting. This is achieved by exploiting the category name parameter...

CVE-2021-38316: Improper Neutralization of Input During Web Page Generation

The WP Academic People List WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the categoryname parameter in the /admin-panel.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.4.1...