HMS SQL Injection Vulnerability

HMS is a computer or web-based hospital management system. version 1.0 of HMS is vulnerable to SQL injection, which stems from the presence of multiple parameters that can lead to SQL injection when requesting appointment.php using the POST method. An attacker could use this vulnerability to obta...

CVE-2022-30011

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

Sql injection

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

Sql injection

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

CVE-2022-30011

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

CVE-2022-30011

CVE-2022-30011 affects HMS 1.0, where a SQL injection is possible when requesting appointment.php via POST with multiple parameters. The root cause is not fully detailed across sources, but multiple parameters in the POST request are identified as enabling the vulnerability. Impact is described i...

CVE-2022-30011

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

PT-2022-19967 · Hms · Hms

Name of the Vulnerable Software and Affected Versions: HMS version 1.0 Description: The issue is related to a SQL injection vulnerability. When requesting "appointment.php" through POST, multiple parameters can lead to this vulnerability. Recommendations: For HMS version 1.0, as a temporary...

PT-2022-19968

Name of the Vulnerable Software and Affected Versions HMS version 0 Description The issue concerns SQL injection vulnerabilities in multiple parameters of the POST request on the appointment.php page. These vulnerabilities allow for the potential obtainment of database information through...

CVE-2022-30012: Improper Neutralization of Special Elements used in an SQL Command

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

CVE-2022-30011: Improper Neutralization of Special Elements used in an SQL Command

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

CVE-2022-25491

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php...

Sql injection

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php...

CVE-2022-25491

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php...

CVE-2022-25491

CVE-2022-25491 affects HMS v1.0. A SQL injection vulnerability exists in the editid parameter of appointment.php. Root cause: unsafely handled input enabling arbitrary SQL execution. Exploitation details are not provided in the connected documents. CVSS‑3.1 base score 7.5 (HIGH) with Network atta...

CVE-2022-25491

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php...

PT-2022-17327

Name of the Vulnerable Software and Affected Versions HMS version 1.0 Description A SQL injection issue was discovered in HMS via the editid parameter in the appointment.php file. This allows for potential exploitation. No information is provided about the estimated number of potentially affected...