Lucene search
+L

72 matches found

Positive Technologies
Positive Technologies
added 2023/02/11 12:00 a.m.9 views

PT-2023-5592 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System thru commit 4770d Description: The issue is related to a SQL injection vulnerability in the Hospital Management System. This vulnerability is exploited via the app contact parameter in the appsearch.php file. The...

9.1CVSS9.2AI score0.0067EPSS
SaveExploits1References9
OSV
OSV
added 2023/01/20 7:15 p.m.5 views

CVE-2022-48120

SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd on March 13, 2021, allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php...

9.8CVSS6.1AI score0.0087EPSS
SaveExploits1References1
NVD
NVD
added 2023/01/20 7:15 p.m.23 views

CVE-2022-48120

SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd on March 13, 2021, allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php...

9.8CVSS10AI score0.0087EPSS
SaveExploits1References1
CVE
CVE
added 2023/01/20 12:00 a.m.57 views

CVE-2022-48120

CVE-2022-48120 concerns a SQL Injection flaw in kishan0725 Hospital Management System. The vulnerability is triggered in /search.php via the contact and doctor parameters, allowing an attacker to execute arbitrary commands. Root cause is a lack of input validation/parameterization in the affected...

9.8CVSS9.9AI score0.0087EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/01/20 12:00 a.m.9 views

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System. An attacker could exploit this vulnerability to execute arbitrary...

9.8CVSS9.1AI score0.0087EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/26 12:00 a.m.9 views

Online Diagnostic Lab Management System 跨站脚本漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A cross-site scripting vulnerability exists in Online Diagnostic Lab Management System version 1.0, which originates from an XSS via the firstname, address, middlename, lastname , gender, email, contact...

5.4CVSS5.7AI score0.00554EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/05/04 12:00 a.m.9 views

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. v1.0 of Hospital Management System is vulnerable to SQL injection, which can be exploited by attackers via the patientsearch.php with th...

9.8CVSS8.6AI score0.01419EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/02/10 12:00 a.m.15 views

PHPGurukul Hospital Management System SQL注入漏洞

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A security vulnerability exists in Hospital Management System v4.0, which originates from a SQL injection vulnerability found in Hospital-Management-System-master contact.php via the txtMsg parameter...

7.8CVSS7.9AI score0.01721EPSS
SaveExploits4References4
CNVD
CNVD
added 2020/08/31 12:00 a.m.6 views

Mara CMS Cross-Site Scripting Vulnerability

Mara CMS is a file-based content management system. A cross-site scripting vulnerability exists in Mara CMS 7.5. The vulnerability can be exploited to conduct cross-site scripting attacks via contact.php?theme=...

6.1CVSS6.3AI score0.14552EPSS
SaveExploits2References1
NVD
NVD
added 2018/01/03 8:29 p.m.19 views

CVE-2018-5074

Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter...

4.8CVSS5AI score0.00492EPSS
SaveExploits1References1
Prion
Prion
added 2018/01/03 8:29 p.m.20 views

Design/Logic Flaw

Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter...

3.5CVSS4.8AI score0.00492EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/01/03 8:00 p.m.29 views

CVE-2018-5074

Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter...

5AI score0.00492EPSS
SaveExploits1References1
Rows per page
Query Builder