CVE-2022-25403

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php...

CVE-2022-25402

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

Improper access control

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

Sql injection

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php...

CVE-2022-25402

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

CVE-2022-25403

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php...

CVE-2022-25403

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php...

CVE-2022-25402

CVE-2022-25402 describes an improper access-control flaw in HMS v1.0 that allows unauthenticated attackers to read and modify all PHP files. The root cause is an incorrect access-control mechanism that fails to limit access to sensitive PHP assets. Affected product: HMS v1.0 (as per multiple sour...

CVE-2022-25403

CVE-2022-25403 affects HMS v1.0, with a SQL injection vulnerability in the admin.php component. The issue stems from inadequate handling/validation of user input in admin.php, allowing injection of arbitrary SQL statements. Reported impact in CVSS indicates high severity with partial confidential...

CVE-2022-25402

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

CVE-2022-25402: Undefined Security Weakness

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

CVE-2022-25403: Improper Neutralization of Special Elements used in an SQL Command

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php...

PT-2022-17266

Name of the Vulnerable Software and Affected Versions HMS version 1.0 Description A SQL injection issue was found in the admin.php component. Recommendations For version 1.0, consider restricting access to the admin.php component until a fix is available...

CVE-2022-23364

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

CVE-2022-23365

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

CVE-2022-23364

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

CVE-2022-23366

HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php...

CVE-2022-23364

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

CVE-2022-23365

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

Sql injection

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...