Input validation

Insta HMS before 12.4.10 is vulnerable to XSS because of improper validation of user-supplied input by multiple scripts. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the U...

CVE-2021-42841

CVE-2021-42841 affects Insta HMS before 12.4.10. The flaw is an XSS vulnerability due to improper validation of user-supplied input by multiple scripts, allowing a remote attacker to craft a URL that executes script in a victim’s browser within the hosting site’s context and potentially steal coo...

CVE-2021-42841

Insta HMS before 12.4.10 is vulnerable to XSS because of improper validation of user-supplied input by multiple scripts. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the U...

CVE-2021-42841: Improper Neutralization of Input During Web Page Generation

Insta HMS before 12.4.10 is vulnerable to XSS because of improper validation of user-supplied input by multiple scripts. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the U...

PT-2022-11702

Name of the Vulnerable Software and Affected Versions Insta HMS versions prior to 12.4.10 Description The issue arises from improper validation of user-supplied input by multiple scripts, leading to a potential XSS attack. A remote attacker could exploit this via a crafted URL to execute script i...

Projectworlds Hospital Management System SQL Injection Vulnerability

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. SQL injection vulnerability exists in Projectworlds Hospital Management System version 1.0, which can be exploited by attackers via the "hms -staff.php" in "email parameter" to perform SQL...

CVE-2021-43628

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

CVE-2021-43628

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

CVE-2021-43628

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

CVE-2021-43628

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

CVE-2021-43628: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

PT-2021-23893

Name of the Vulnerable Software and Affected Versions: Projectworlds Hospital Management System version 1.0 Description: The issue concerns SQL injection via the email parameter in the hms-staff.php file. This allows for potential data manipulation or unauthorized access. Recommendations: For...

Projectworlds Hospital Management System SQL注入漏洞

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. SQL injection vulnerability exists in Projectworlds Hospital Management System version 1.0, which can be exploited by attackers via the "hms -staff.php" in "email parameter" to perform SQL...

Hms Networks eCatcher Information Disclosure Vulnerability

Hms Networks eCatcher is a VPN Virtual Private Network client application from the Swedish company HMS Networks. Hms Networks eCatcher suffers from a security vulnerability that stems from weak file system permissions that may allow access by malicious users. An attacker could exploit the...

CVE-2021-33214

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

Information disclosure

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

CVE-2021-33214

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

CVE-2021-33214

CVE-2021-33214 affects HMS Networks eCatcher prior to or up to version 6.6.4. The vulnerability arises from weak filesystem permissions that could allow malicious users to access files, potentially leading to sensitive information disclosure, modification of configuration files, or disruption of ...

Hms Networks eCatcher 安全漏洞

Hms Networks eCatcher is a VPN Virtual Private Network client application from the Swedish company HMS Networks. Hms Networks eCatcher suffers from a security vulnerability that stems from weak file system permissions that may allow access by malicious users. An attacker could exploit the...

CVE-2021-33214: Incorrect Default Permissions

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...