Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/08/16 10:10 a.m.6 views

CVE-2025-8955

A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

9.8CVSS7.9AI score0.00075EPSS
Exploits1References1
OSV
OSV
added 2025/06/04 10:15 a.m.4 views

CVE-2025-5584

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as problematic. Affected is an unknown function of the file /doctor/edit-patient.php?editid=2 of the component POST Parameter Handler. The manipulation of the argument patname leads to cross site...

5.4CVSS3.7AI score
Exploits0References5
CNNVD
CNNVD
added 2025/06/04 12:0 a.m.3 views

PHPGurukul Hospital Management System 代码注入漏洞

Hospital Management System a PHP and MySQL based hospital management system. Hospital Management System has a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the parameter patname in the file /doctor/edit-patient.php,...

5.4CVSS4AI score0.00152EPSS
Exploits1References5
CNVD
CNVD
added 2025/06/04 12:0 a.m.1 views

Hospital Management System In PHP Code Execution Vulnerability

Hospital Management System In PHP is a PHP and MySQL based hospital management system. A code execution vulnerability exists in Hospital Management System In PHP, which originates in the hms/doctor/edit-profile.php file could lead to the execution of arbitrary code. No details of the vulnerabilit...

9.8CVSS7.6AI score0.039EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/23 12:0 a.m.1 views

PHPGurukul Hospital Management System 安全漏洞

Hospital Management System In PHP is a PHP and MySQL based hospital management system. A code execution vulnerability exists in Hospital Management System In PHP, which originates in the hms/doctor/edit-profile.php file could lead to the execution of arbitrary code. No details of the vulnerabilit...

9.8CVSS7.4AI score0.039EPSS
Exploits1References1
OSV
OSV
added 2024/10/21 7:15 p.m.2 views

CVE-2024-46239

Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php...

5.9CVSS5.7AI score
Exploits0References1
CNNVD
CNNVD
added 2024/10/21 12:0 a.m.2 views

PHPGurukul Hospital Management System 跨站脚本漏洞

PHPGurukul Hospital Management System is an open source PHP and MySQL based hospital management system from PHPGurukul. A security vulnerability exists in PHPGurukul Hospital Management System version 4.0, which originates from multiple cross-site scripting vulnerabilities in the docname paramete...

5.9CVSS6.6AI score0.0014EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/10/21 12:0 a.m.2 views

PT-2024-31930 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns cross-site scripting vulnerabilities in the PHPGurukul Hospital Management System. These vulnerabilities exist via the docname parameter in...

5.9CVSS6.4AI score0.0014EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/10/09 12:0 a.m.2 views

PHPGurukul Hospital Management System 安全漏洞

PHPGurukul Hospital Management System is an open source PHP and MySQL based hospital management system from PHPGurukul. A security vulnerability exists in PHPGurukul Hospital Management System version 4.0, which originates from a cross-site scripting attack via the patname, pataddress, and medhis...

5.4CVSS6.1AI score0.00151EPSS
Exploits1References2
OSV
OSV
added 2023/08/21 1:15 a.m.2 views

CVE-2023-4443

A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0/5.0.12. Affected is an unknown function of the file vm\doctor\edit-doc.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. It...

9.8CVSS5.7AI score0.00066EPSS
Exploits0References3
wpexploit
wpexploit
added 2023/06/05 12:0 a.m.273 views

KiviCare Management System < 3.2.1 - Multiple CSRF

The plugin does not have CSRF checks either flawed or missing completely in various AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. This includes, but is not limited to: Delete arbitrary appointments/medical records/etc, create/update...

8.8CVSS9.2AI score0.00191EPSS
Exploits2
Rows per page
Query Builder