Lucene search
+L

10 matches found

NVD
NVD
•added 2026/05/18 4:16 a.m.•41 views

CVE-2026-8785

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file updateinfo.php of the component GET Parameter Handler. Executing a manipulation of the argument appointmentno can lead to sql injection. The...

7.5CVSS0.00411EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/05/18 2:45 a.m.•64 views

CVE-2026-8785 projectworlds hospital-management-system-in-php GET Parameter update_info.php getAllPatientDetail sql injection

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file updateinfo.php of the component GET Parameter Handler. Executing a manipulation of the argument appointmentno can lead to sql injection. The...

7.5CVSS0.00411EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/05/18 2:45 a.m.•18 views

CVE-2026-8785 projectworlds hospital-management-system-in-php GET Parameter update_info.php getAllPatientDetail sql injection

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file updateinfo.php of the component GET Parameter Handler. Executing a manipulation of the argument appointmentno can lead to sql injection. The...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References5
CVE
CVE
•added 2026/05/18 2:45 a.m.•29 views

CVE-2026-8785

Affected product: projectworlds hospital-management-system-in-php 1.0. The vulnerability is in the GET Parameter Handler, specifically the getAllPatientDetail function in update_info.php. The issue arises from manipulating the appointment_no argument, enabling SQL injection. It can be exploited r...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/05/18 2:45 a.m.•18 views

CVE-2026-8785

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file updateinfo.php of the component GET Parameter Handler. Executing a manipulation of the argument appointmentno can lead to sql injection. The...

7.5CVSS5.5AI score0.00411EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
•added 2026/05/18 12:00 a.m.•21 views

Projectworlds Hospital Management System 注入漏洞

Projectworlds Hospital Management System is a hospital management system developed by the Austrian company Projectworlds. Version 1.0 of the Projectworlds Hospital Management System has a SQL injection vulnerability. This vulnerability arises from the function getAllPatientDetail in the GET...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/04/24 4:50 a.m.•85 views

CVE

Vulnerability Report: Unauthenticated SQL Injection in Hospita...

6.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 7:44 p.m.•17 views

CVE-2021-43631

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

9.8CVSS7.9AI score0.0113EPSS
SaveExploits1
OSV
OSV
•added 2021/12/22 6:15 p.m.•16 views

CVE-2021-43631

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

9.8CVSS5.8AI score0.0113EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/12/22 6:15 p.m.•7 views

CVE-2021-43631

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

9.8CVSS7.3AI score0.0113EPSS
SaveExploits1References3
Rows per page
Query Builder