Hospital Management System change-password.php Page SQL Injection Vulnerability

Hospital Management System a hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the cpass parameter of the change-password.php page. An attacker can exploit this vulnerabili...

Code-Projects Hospital Management System SQL注入漏洞

Hospital Management System a hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the cpass parameter of the change-password.php page. An attacker can exploit this vulnerabili...

CVE-2024-10169: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Hospital Management System 1.0. This vulnerability affects unknown code of the file change-password.php. The manipulation of the argument cpass leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-26492: Undefined Security Weakness

An issue in Online Diagnostic Lab Management System 1.0 allows a remote attacker to gain control of a 'Staff' user account via a crafted POST request using the id, email, password, and cpass parameters...

Hospital Management System SQL Injection Vulnerability (CNVD-2026-32766)

Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a SQL injection vulnerability. This vulnerability arises from the cpass parameter on the admin/change-password.php page, which lacks validation fo...

Sql injection

A vulnerability classified as critical was found in PHPGurukul Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/change-password.php. The manipulation of the argument cpass leads to sql injection. The exploit has been disclosed to the...

CVE-2024-0362: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/change-password.php. The manipulation of the argument cpass leads to sql injection. The exploit has been disclosed to the...

PHPGurukul Hospital Management System SQL Injection Vulnerability

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A SQL injection vulnerability exists in PHPGurukul Hospital Management System version 1.0, which originates from a SQL injection vulnerability in the cpass parameter of the admin/change-password.php page...

PT-2024-15497

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System version 1.0 Description A critical vulnerability was found in the PHPGurukul Hospital Management System. The issue affects an unknown functionality of the file admin/change-password.php. The manipulation o...

CVE-2007-5060: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password and rpassword parameters, possibly related to timestamp values...