Code injection

Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php...

Sql injection

Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/updateuser.php?id=...

CVE-2022-36270

Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php...

CVE-2022-36270

CVE-2022-36270 affects Clinic's Patient Management System v1.0. The issue is an arbitrary code execution vulnerability exploitable via a crafted request to ip/pms/users.php, leading to high-impact outcomes (confidentiality, integrity, and availability). The CVE entry lists a NVD CVSS v3.1 base sc...

CVE-2022-36750

CVE-2022-36750 : Clinic’s Patient Management System v1.0 is vulnerable to SQL injection through /pms/update_user.php?id=. The CVSS 3.1 base score is 9.8 (CRITICAL) with network attack vector, low complexity, and no privileges required. Affected component is the update_user endpoint handling the i...

CVE-2022-36750

Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/updateuser.php?id=...

PT-2022-23286 · Unknown · Clinic'S Patient Management System

Name of the Vulnerable Software and Affected Versions: Clinic's Patient Management System version 1.0 Description: The issue concerns arbitrary code execution via the url: ip/pms/users.php. This allows for potential exploitation. Recommendations: For Clinic's Patient Management System version 1.0...

Clinic‘s Patient Management System SQL注入漏洞

Clinic's Patient Management System is a patient management system for a clinic by Carlo Montero. A security vulnerability exists in Clinic's Patient Management System v1.0, which originates from an SQL injection that can be achieved by an attacker via url:/pms/updateuser.php?id=...

PT-2022-23604 · Unknown · Clinic'S Patient Management System

Name of the Vulnerable Software and Affected Versions: Clinic's Patient Management System version 1.0 Description: The issue concerns a SQL injection vulnerability. It can be exploited via the /pms/update user.php endpoint, specifically through the id parameter. Recommendations: For Clinic's...

Clinic‘s Patient Management System 安全漏洞

Clinic's Patient Management System is a patient management system for clinics by Carlo Montero. A security vulnerability exists in Clinic's Patient Management System v1.0, which allows attackers to achieve arbitrary code execution via url:ip/pms/users.php...

brisbanesouthnaturopathyclinic.com.au Cross Site Scripting vulnerability OBB-2828116

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-2298

CVE-2022-2298 affects SourceCodester Clinics Patient Management System 2.0, specifically the Login Page at /pms/index.php. The vulnerability arises from an injectable user_name parameter; input like admin' or '1'='1 can trigger SQL injection. Exploitation can be performed remotely, and public PoC...

Data Brokers Track Abortion Clinic Visits for Anyone to Buy

Plus: Russia rerouted internet in occupied Ukraine, Grindr sold its users' location data to ad networks, and more...

CVE-2022-28533

Sourcecodester Medical Hub Directory Site 1.0 is vulnerable to SQL Injection via /mhds/clinic/viewdetails.php...

CVE-2022-28533

Sourcecodester Medical Hub Directory Site 1.0 is vulnerable to SQL Injection via /mhds/clinic/viewdetails.php...

npdc.clinic Cross Site Scripting vulnerability OBB-2567315

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Improper authorization - receptionist can read all Clinic reports

Description Hi there openemr maintainers, I would like to report an improper authorization vulnerability in your source code. Proof of Concept 1. Install openemr in your system and create an admin account and a receptionist account 2. Log in as receptionist and see that you don't see Reports...

Patient Appointment Scheduler System SQL Injection Vulnerability

Patient Appointment Scheduler System is a patient appointment scheduling system project. It provides an online platform for clinic patients or potential patients to schedule appointments with physicians. patient Appointment Scheduler System version 1.0 contains a SQL injection vulnerability that...

communityanimalclinic.vetstreet.com Open Redirect vulnerability OBB-2348637

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-39416

Multiple Cross Site Scripting XSS vulnerabilities exists in Remote Clinic v2.0 in 1 patients/register-patient.php via the a Contact, b Email, c Weight, d Profession, e refcontact, f address, g gender, h age, and i serial parameters; in 2 patients/edit-patient.php via the a Contact, b Email, c...