Lucene search
+L

19 matches found

RedhatCVE
RedhatCVE
•added 2025/11/19 12:10 a.m.•29 views

CVE-2025-63512

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

6.5CVSS5.9AI score0.00238EPSS
SaveExploits1References1
OSV
OSV
•added 2025/11/18 5:16 p.m.•10 views

CVE-2025-63512

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

6.5CVSS5.9AI score0.00238EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/18 5:16 p.m.•16 views

CVE-2025-63512

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

6.5CVSS0.00238EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/18 12:00 a.m.•30 views

CVE-2025-63512

The kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection within the admin-panel1.php file, specifically affecting the deleting doctor logic . The root cause is the application's failure to properly sanitize or parameterize user-supplied input from the demail parameter, which i...

6.5CVSS5.8AI score0.00238EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/18 12:00 a.m.•10 views

CVE-2025-63512

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

5.9AI score0.00238EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/18 12:00 a.m.•15 views

PT-2025-47337

Name of the Vulnerable Software and Affected Versions Hospital Management System version 4 Description The Hospital Management System version 4 is susceptible to a SQL Injection issue within the admin-panel1.php file, specifically in the doctor deletion functionality. The application does not...

6.5CVSS7.5AI score0.00238EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/11/18 12:00 a.m.•27 views

CVE-2025-63512

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

0.00238EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/18 12:00 a.m.•17 views

EUVD-2025-198036

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

6.5CVSS7.4AI score0.00238EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/18 12:00 a.m.•6 views

CVE-2025-63512: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

6.5CVSS5.9AI score0.00238EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:06 a.m.•18 views

CVE-2022-25409

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...

5.4CVSS6AI score0.00487EPSS
SaveExploits1References1
OSV
OSV
•added 2023/12/21 4:15 p.m.•16 views

CVE-2023-45116

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database...

8.8CVSS5.8AI score0.00673EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•5 views

CVE-2023-45116: Improper Neutralization of Special Elements used in an SQL Command

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database...

8.8CVSS7.8AI score0.00673EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/21 12:00 a.m.•17 views

PT-2023-29415 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue concerns multiple Authenticated SQL Injection vulnerabilities. Specifically, the demail parameter of the "/update.php" resource does not validate the characters received, and they a...

9.8CVSS9.1AI score0.00673EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2022/02/28 11:15 p.m.•13 views

CVE-2022-25409

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...

5.4CVSS6AI score0.00487EPSS
SaveExploits1References2
OSV
OSV
•added 2022/02/28 11:15 p.m.•15 views

CVE-2022-25409

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...

5.4CVSS6AI score0.00487EPSS
SaveExploits1References1
Mend
Mend
•added 2022/02/28 10:55 p.m.•6 views

CVE-2022-25409

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...

5.4CVSS0.00487EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/02/28 12:00 a.m.•21 views

HealthNode Hospital Management System跨站脚本漏洞

HealthNode Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A cross-site scripting vulnerability exists in Hospital Management System v1.0, which stems from t...

5.4CVSS5.6AI score0.00487EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/28 12:00 a.m.•10 views

CVE-2022-25409: Improper Neutralization of Input During Web Page Generation

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...

5.4CVSS5.8AI score0.00487EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/02/28 12:00 a.m.•4 views

PT-2022-17272

Name of the Vulnerable Software and Affected Versions Hospital Management System version 1.0 Description The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the demail parameter at the "/admin-panel1.php" API endpoint. Recommendations F...

5.4CVSS0.00487EPSS
SaveExploits1References5
Rows per page
Query Builder