HMS SQL Injection Vulnerability

HMS is a computer or web-based hospital management system. Useful for managing the operations of a hospital or any medical facility, a SQL injection vulnerability exists in HMS version 1.0, which stems from the presence of multiple parameters when requesting appointment.php using the POST method...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

CVE-2022-30011

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

CVE-2022-30011

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

Sql injection

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

Sql injection

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

CVE-2022-30012

The CVE-2022-30012 entry affects HMS v.0. In the POST request to appointment.php, multiple parameters expose SQL injection vulnerabilities that can disclose database information. The issue is documented across CVE/NVD entries and corroborated by CNVD/Red Hat/CNVD entries, all stating SQL injectio...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

CVE-2022-30011

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

CVE-2022-30011

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

CVE-2022-30011

CVE-2022-30011 affects HMS 1.0, where a SQL injection is possible when requesting appointment.php via POST with multiple parameters. The root cause is not fully detailed across sources, but multiple parameters in the POST request are identified as enabling the vulnerability. Impact is described i...

PT-2022-19967 · Hms · Hms

Name of the Vulnerable Software and Affected Versions: HMS version 1.0 Description: The issue is related to a SQL injection vulnerability. When requesting "appointment.php" through POST, multiple parameters can lead to this vulnerability. Recommendations: For HMS version 1.0, as a temporary...

PT-2022-19968

Name of the Vulnerable Software and Affected Versions HMS version 0 Description The issue concerns SQL injection vulnerabilities in multiple parameters of the POST request on the appointment.php page. These vulnerabilities allow for the potential obtainment of database information through...

CVE-2022-30011: Improper Neutralization of Special Elements used in an SQL Command

In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability...

CVE-2022-30012: Improper Neutralization of Special Elements used in an SQL Command

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

CVE-2022-30448

The CVE-2022-30448 entry relates to the Hospital Management System (HMS) 1.0, a PHP-based app. A concrete vulnerability exists in treatmentrecord.php where file uploads are inadequately validated, enabling an attacker to upload a malicious file. The core issue is lack of proper validation for upl...

CVE-2022-30449: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System in PHP with Source Code HMS 1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in room.php...