CVE-2026-90805

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file doctorlogin.php. Executing a manipulation of the argument docmail/docpswd can lead to sql injection. The attack can be executed remotely...

CVE-2026-90805 subhajitkhan online-clinic-management-system doctorlogin.php sql injection

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file doctorlogin.php. Executing a manipulation of the argument docmail/docpswd can lead to sql injection. The attack can be executed remotely...

EUVD-2026-77681

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file doctorlogin.php. Executing a manipulation of the argument docmail/docpswd can lead to sql injection. The attack can be executed remotely...

CVE-2026-90805

A SQL injection vulnerability exists in the doctorlogin.php file of subhajitkhan online-clinic-management-system (a GitHub-hosted project). By manipulating the doc_mail and doc_pswd arguments, an unauthenticated remote attacker can inject SQL commands. The CVSS 3.1 score is 7.3 (High) with low im...

CVE-2022-23365

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

EUVD-2022-28444

Malicious code in bioql PyPI...

CVE-2022-32094

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php...

CVE-2022-32094

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php...

CVE-2022-32094

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php...

Sql injection

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php...

CVE-2022-32094

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php...

CVE-2022-32094

Hospital Management System v1.0 is vulnerable to SQL injection in server-side scripts. Public notes show two confirmed vectors: an unsanitized input parameter in /HMS/doctor.php (editid) and a login flow parameter in /doctorlogin.php (loginid). Root cause across sources is improper input handling...

CVE-2022-23365

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

CVE-2022-23365

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

Sql injection

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

CVE-2022-23365

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...