PT-2022-21242

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/doctors/view doctor.php endpoint, specifically through the id parameter...

Sql injection

In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks...

CVE-2022-30516

The connected sources confirm a SQL injection vulnerability in Hospital-Management-System v1.0, specifically in the editid parameter of doctor.php. The root cause is missing SQL filtering/escaping for editid, enabling attackers to manipulate queries. CVSS data indicates a high-severity, network-e...

PT-2022-20153

Name of the Vulnerable Software and Affected Versions Hospital-Management-System version 1.0 Description The issue concerns a SQL injection vulnerability. Specifically, the editid parameter in the "doctor.php" page is vulnerable to SQL injection attacks. Recommendations For...

CVE-2022-30516: Improper Neutralization of Special Elements used in an SQL Command

In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks...

PT-2022-17041

Name of the Vulnerable Software and Affected Versions Hospital Patient Record Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter in the "/admin/doctors/manage doctor.php" API endpoint...

PT-2022-17040

Name of the Vulnerable Software and Affected Versions Hospital Patient Record Management System version 1.0 Description A SQL injection issue was found in the Hospital Patient Record Management System. The vulnerability is exploited via the id parameter in the "/admin/doctors/view doctor.php" API...