CVE-2022-27420

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...

CVE-2022-27420

Hospital Management System v1.0 contains a SQL injection vulnerability in patientsearch.php via the patient_contact parameter. The issue allows remote attackers (network vector, no auth) to potentially cause partial confidentiality, integrity, and availability impacts as reflected in CVSS metrics...