CVE-2022-4013 Hospital Management Center appointment.php cross-site request forgery

A vulnerability classified as problematic was found in Hospital Management Center. Affected by this vulnerability is an unknown functionality of the file appointment.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to t...

CVE-2022-4013

CVE-2022-4013 concerns the Hospital Management Center and a vulnerability in the unknown functionality of appointment.php that allows cross-site request forgery (CSRF). The issue can be exploited remotely and the exploit has been disclosed to the public per VDB-213787. Descriptions across multipl...

HMS SQL Injection Vulnerability

HMS is a computer or web-based hospital management system. Useful for managing the operations of a hospital or any medical facility, a SQL injection vulnerability exists in HMS version 1.0, which stems from the presence of multiple parameters when requesting appointment.php using the POST method...

HMS SQL Injection Vulnerability

HMS is a computer or web-based hospital management system. version 1.0 of HMS is vulnerable to SQL injection, which stems from the presence of multiple parameters that can lead to SQL injection when requesting appointment.php using the POST method. An attacker could use this vulnerability to obta...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

CVE-2022-30011

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

Sql injection

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

Sql injection

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

CVE-2022-30011

CVE-2022-30011 affects HMS 1.0, where a SQL injection is possible when requesting appointment.php via POST with multiple parameters. The root cause is not fully detailed across sources, but multiple parameters in the POST request are identified as enabling the vulnerability. Impact is described i...

CVE-2022-30011

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

PT-2022-19967 · Hms · Hms

Name of the Vulnerable Software and Affected Versions: HMS version 1.0 Description: The issue is related to a SQL injection vulnerability. When requesting "appointment.php" through POST, multiple parameters can lead to this vulnerability. Recommendations: For HMS version 1.0, as a temporary...

CVE-2022-25491

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php...

Sql injection

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php...

CVE-2022-25491

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php...

CVE-2022-25491

CVE-2022-25491 affects HMS v1.0. A SQL injection vulnerability exists in the editid parameter of appointment.php. Root cause: unsafely handled input enabling arbitrary SQL execution. Exploitation details are not provided in the connected documents. CVSS‑3.1 base score 7.5 (HIGH) with Network atta...

kinghavencounseling.com XSS vulnerability

Open Bug Bounty ID: OBB-560209 Description| Value ---|--- Affected Website:| kinghavencounseling.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...