Sql injection

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

Sql injection

HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php...

CVE-2022-23366

HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php...

CVE-2022-23366

HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php...

CVE-2022-23366

CVE-2022-23366 affects HMS v1.0 with a SQL injection in patientlogin.php. The vulnerability is evidenced across multiple connected sources (Red Hat, CNVD, CNVD-like entries) and exploited publicly (Exploit-DB, PacketStorm), showing a login parameter (loginid) susceptible to time-based blind SQLi ...

CVE-2022-23365

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

CVE-2022-23365

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

CVE-2022-23365

CVE-2022-23365 affects HMS v1.0 and is a SQL injection vulnerability exposed via doctorlogin.php. The root cause is improper handling/validation of inputs in the login mechanism that allows crafted SQL statements to be executed by the database. This aligns with the CVSS metrics: high/critical imp...

CVE-2022-23364

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

CVE-2022-23364

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

CVE-2022-23364

CVE-2022-23364 affects HMS v1.0 and is described as a SQL injection vulnerability exploitable via the adminlogin.php endpoint. The connected documents corroborate a SQL injection issue in HMS, but do not provide concrete exploit details, affected versions beyond v1.0, or remediation steps. The im...

CVE-2022-23364: Improper Neutralization of Special Elements used in an SQL Command

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

PT-2022-15954

Name of the Vulnerable Software and Affected Versions HMS version 1.0 Description A SQL injection issue was found in HMS via the "adminlogin.php" endpoint. Recommendations For version 1.0, update to a newer version that contains a fix for this issue. At the moment, there is no information about a...

PT-2022-15956

Name of the Vulnerable Software and Affected Versions HMS version 1.0 Description A SQL injection issue was discovered in HMS via the patientlogin.php file. This allows for potential exploitation. Recommendations For HMS version 1.0, consider restricting access to the patientlogin.php file until ...

CVE-2022-23365: Improper Neutralization of Special Elements used in an SQL Command

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

CVE-2022-23366: Improper Neutralization of Special Elements used in an SQL Command

HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php...

PT-2022-15955

Name of the Vulnerable Software and Affected Versions HMS version 1.0 Description A SQL injection issue was found in HMS via the "doctorlogin.php" endpoint. Recommendations For HMS version 1.0, consider restricting access to the doctorlogin.php endpoint until a patch is available...

Practo Technologies Insta Hms跨站脚本漏洞

Practo Technologies Insta Hms is a hospital information system from Practo Technologies, India. Practo Technologies Insta HMS has a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers to...

CVE-2021-42841

Insta HMS before 12.4.10 is vulnerable to XSS because of improper validation of user-supplied input by multiple scripts. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the U...

CVE-2021-42841

Insta HMS before 12.4.10 is vulnerable to XSS because of improper validation of user-supplied input by multiple scripts. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the U...