18 matches found
EUVD-2025-210541
kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...
CVE-2025-69943
The kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection within the get_doctor.php file. The vulnerability is triggered via the doctor and specilizationid parameters. This flaw allows for the improper neutralization of special elements used in an SQL command, potentially leadi...
CVE-2025-69943
kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...
PT-2026-65913
kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get doctor.php via the parameters doctor and specilizationid...
CVE-2025-69943
kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...
CVE-2025-69943
kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...
CVE-2025-5360
A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /book-appointment.php. The manipulation of the argument doctor leads to sql injection. The attack can be initiated remotely. The exploit has bee...
CampCodes Online Hospital Management System 注入漏洞
CampCodes Online Hospital Management System is an online hospital management system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Hospital Management System, which originates from a SQL injection due to an incorrect manipulation of the doctor...
CVE-2022-25407
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Doctor parameter at /admin-panel1.php...
CVE-2022-48120
SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd on March 13, 2021, allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php...
CVE-2022-48120
SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd on March 13, 2021, allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php...
CVE-2022-48120
CVE-2022-48120 concerns a SQL Injection flaw in kishan0725 Hospital Management System. The vulnerability is triggered in /search.php via the contact and doctor parameters, allowing an attacker to execute arbitrary commands. Root cause is a lack of input validation/parameterization in the affected...
Hospital Management System SQL注入漏洞
Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System. An attacker could exploit this vulnerability to execute arbitrary...
CVE-2022-25407
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Doctor parameter at /admin-panel1.php...
CVE-2022-25407
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Doctor parameter at /admin-panel1.php...
CVE-2022-25407
The CVE-2022-25407 entry corresponds to a stored cross-site scripting (XSS) vulnerability in Hospital Management System v1.0, specifically via the Doctor parameter in /admin-panel1.php. Multiple connected sources (NVD, Red Hat, PRION, CNNVD, etc.) confirm the issue, describing the root cause as a...
PHPGurukul Hospital Management System 跨站脚本漏洞
PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. PHPGurukul Hospital Management System suffers from a cross-site scripting vulnerability that stems from the discovery that Hospital Management System v1.0 contains a stored cross-site scripting vulnerabilit...
CVE-2022-25407: Improper Neutralization of Input During Web Page Generation
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Doctor parameter at /admin-panel1.php...