CVE-2022-25490

creationtimestamp| type| source ---|---|--- 2022-03-15 21:19:44+00:00| seen| https://t.me/cibsecurity/38970...

CVE-2022-25490

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php...

CVE-2022-25490

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php...

CVE-2022-25490

HMS v1.0 contains a SQL injection flaw in the department.php editid parameter. The vulnerability is documented with CVSS v3.1 base score 9.8 (CRITICAL) and CVSS v2.0 base score 7.5 (HIGH), indicating network access, no authentication required, and potential high impact on confidentiality, integri...