4 matches found
CVE-2025-8955: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...
Hospital Management System Cross-site Scripting Vulnerability (CNVD-2026-32774)
Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a cross-site scripting vulnerability. This vulnerability arises from the docname parameters in the /admin/add-doctor.php and /admin/edit-doctor.ph...
CVE-2024-46238: Improper Neutralization of Input During Web Page Generation
Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php...
