Hospital Management System 1.0 - Cross-Site Scripting

Hospital Management System 1.0 contains a cross-site scripting vulnerability via the searchdata parameter in doctor/search.php and patient-search.php. id: CVE-2021-39411 info: name: Hospital Management System 1.0 - Cross-Site Scripting author: arafatansari severity: high description: | Hospital...

CVE-2021-39411

Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the 1 searchdata parameter in a doctor/search.php and b admin/patient-search.php, and the 2 fromdate and 3 todate parameters in admin/betweendates-detailsreports.php...

CVE-2021-39411

CVE-2021-39411 affects PHPGurukul Hospital Management System 4.0. Vulnerable components: searchdata (doctor/search.php, admin/patient-search.php) and fromdate/todate (admin/betweendates-detailsreports.php), enabling Cross-Site Scripting. Root cause: inadequate input sanitization in those endpoint...