Hospital Management System 4.0 - SQL Injection

Hospital Management System 4.0 contains multiple SQL injection vulnerabilities because multiple pages and parameters do not validate user input. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of...

Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/doctor.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

PHPGurukul Hospital Management System - Cross-Site Scripting

PHPGurukul Hospital Management System in PHP 4.0 contains multiple cross-site scripting vulnerabilities. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2020-5191 info: name: PHPGurukul Hospital Management System -...

Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/admin.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

PHPGurukul Hospital Management System 4.0 - SQL Injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain sensitive database information. id: CVE-2020-22165 info: name: PHPGurukul Hospital Management System 4.0 - SQL Injection...

Hospital Management System 1.0 - Cross-Site Scripting

Hospital Management System 1.0 contains a cross-site scripting vulnerability via the searchdata parameter in doctor/search.php and patient-search.php. id: CVE-2021-39411 info: name: Hospital Management System 1.0 - Cross-Site Scripting author: arafatansari severity: high description: | Hospital...

CVE-2023-7173

CVE-2023-7173：医院管理系统中的存储型跨站脚本（XSS）漏洞 漏洞详情 CVE ID： CVE-2023-7173 漏洞类型： 存储型 XSS 受影响组件： 用户登录页面 易受攻击的参数： Fullname 供应商详情： phpgurukul.com 受影响版本： 医院管理系统 1.0 漏洞描述 存储型跨站脚本（XSS）是一种严重的 Web 漏洞，允许将恶意代码注入网站，存储在数据库中，并在其他用户查看受感染页面时执行。在本案例中，该漏洞存在于医院管理系统（HMS）的用户登录页面中，其中“Fullname”参数容易受到存储型 XSS...

CVE-2023-7172

CVE-2023-7172 概述 本项目包含一个存在漏洞的医院管理系统（HMS）版本，该系统容易受到 SQL 注入（CVE-2023-7172）攻击。SQL 注入是一种严重的 Web 应用程序漏洞，可能对系统的安全性和功能造成严重影响。 CVE 详情 CVE ID： CVE-2023-7172 漏洞类型： SQL 注入 受影响组件： 管理员登录页面 易受攻击的参数： username 供应商详情： phpgurukul.com 受影响版本： 医院管理系统 1.0 复现步骤（PoC） 克隆仓库： git clone...

CVE-2022-22296

CVE-2022-22296 CVE-2022-22296 に関するすべての詳細 ソフトウェア: Hospital's Patient Records Management System 1.0 ソフトウェアリンク: https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html 脆弱性タイプ: 安全でない権限 - IDOR 影響を受けるコンポーネント: id parameter in Change User Function...

Zero-Day-Legacy

🎓 毕业设计 — 阿杰隆国立大学（ANU） 信息技术学院 · 网络安全与云计算 · 2026学年 🏆 全校最高分：97% 📖 概述 Zero-Day Legacy 是一个真实的、故意设计存在漏洞的 Boot-to-Root CTF（夺旗） 实验室机器，作为 阿杰隆国立大学 的毕业设计项目构建。它模拟了一个完整的医院管理系统 — 皇家健康医院 — 包含贯穿多种漏洞类别的完整真实攻击链。 攻击者扮演一名 负担不起医院账单的患者 ，决定从内部网络入侵系统。从基础侦察开始，攻击者必须串联 17 个步骤，从初始 Web 访问直至完全 root 权限 — 模拟真实世界的渗透测试。 ⚠...

CVE-2021-41773

CVE-2021-41773 GREENDARK病院のインフラは、Dr. Gusto Rogueが解雇前に設定したものです。これ以上の詳細は提供されていません。 Usage: python3 greendark.py...

CVE-2024-23747

CVE-2024-23747 Moderna Sistemas ModernaNet Hospital Management System 2024 は、Insecure Direct Object Reference IDOR の脆弱性の影響を受けます。 PoC この脆弱性は、/Modernanet/LAUDO/LAU0000100/Laudo?id= URL を通じたユーザーデータアクセスのシステムの処理に存在します。この id パラメータを操作することで、攻撃者は機密性の高い医療情報にアクセスできる可能性があります。...

CVE-2022-27413

Hospital-Management-System v1.0 - SQLi ベンダー 説明: 脆弱性のあるページは admin.php です。 http://you ip/HMS/admin.php Hospital-Management-System v1.0 admin.php ページの adminname パラメータは、SQLインジェクション攻撃に対して脆弱であるようです。 +sqlmap: python3 sqlmap.py -r Your post packet.txt --random-agent --risk=3 --level=3 -dbs + ペイロード:...

CVE-2026-86302

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

CVE-2026-86301

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched...

CVE-2026-86302 code-projects Hospital Information System SQL Database Backup File his.sql information disclosure

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

CVE-2026-86302

CVE-2026-86302 affects code-projects Hospital Information System 1.0 , specifically the /HIS/his.sql file handled by the SQL Database Backup File Handler component. The vulnerability allows information disclosure through a remotely accessible SQL database backup file, requiring no authentication ...

CVE-2026-86302 code-projects Hospital Information System SQL Database Backup File his.sql information disclosure

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

EUVD-2026-72355

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

CVE-2026-86301

CVE-2026-86301 is a reflected Cross-Site Scripting (XSS) vulnerability in code-projects Hospital Information System 1.0 , specifically in the Patient Management component at the file /HIS/src/patients/editPatient.php. The vulnerability is triggered by manipulation of the ID argument, allowing a r...