Hospital Management System 4.0 - SQL Injection

Hospital Management System 4.0 contains multiple SQL injection vulnerabilities because multiple pages and parameters do not validate user input. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of...

PHPGurukul Hospital Management System - Cross-Site Scripting

PHPGurukul Hospital Management System in PHP 4.0 contains multiple cross-site scripting vulnerabilities. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2020-5191 info: name: PHPGurukul Hospital Management System -...

Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/admin.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/doctor.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

Hospital Management System 1.0 - Cross-Site Scripting

Hospital Management System 1.0 contains a cross-site scripting vulnerability via the searchdata parameter in doctor/search.php and patient-search.php. id: CVE-2021-39411 info: name: Hospital Management System 1.0 - Cross-Site Scripting author: arafatansari severity: high description: | Hospital...

PHPGurukul Hospital Management System 4.0 - SQL Injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain sensitive database information. id: CVE-2020-22165 info: name: PHPGurukul Hospital Management System 4.0 - SQL Injection...

Zero-Day-Legacy

🎓 Projet de fin d'études — Université nationale d'Ajloun ANU Faculté d'IT · Cybersécurité et Cloud Computing · Année académique 2026 🏆 Note la plus élevée de l'université : 97 % 📖 Présentation Zero-Day Legacy est une machine de laboratoire CTF Capture The Flag de type Boot-to-Root , réaliste et...

CVE-2024-23747

CVE-2024-23747 Moderna Sistemas ModernaNet Hospital Management System 2024 подвержена уязвимости небезопасной прямой ссылки на объект Insecure Direct Object Reference, IDOR. PoC Эта уязвимость заключается в том, как система обрабатывает доступ к пользовательским данным через URL-адрес...

CVE-2022-27413

Hospital-Management-System v1.0 - SQLi Разработчик Описание: Уязвимая страница: admin.php http://you ip/HMS/admin.php Hospital-Management-System v1.0 Параметр adminname на странице admin.php, по-видимому, уязвим для SQL-инъекций. +sqlmap: python3 sqlmap.py -r Your post packet.txt --random-agent...

CVE-2023-7173

CVE-2023-7173: Межсайтовый скриптинг XSS с сохранением в базе данных в системе управления больницей Сведения об уязвимости Идентификатор CVE: CVE-2023-7173 Тип уязвимости: Stored XSS XSS с сохранением Затронутый компонент: Страница входа пользователя Уязвимый параметр: Fullname Сведения о...

CVE-2023-7172

CVE-2023-7172 Обзор Этот проект содержит уязвимую версию системы управления больницей HMS, подверженную SQL-инъекциям CVE-2023-7172. SQL-инъекция — это критическая уязвимость веб-приложений, которая может оказать серьёзное влияние на безопасность и функциональность системы. Детали CVE Идентификат...

CVE-2026-82914

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2026-82914

kishan0725 Hospital-Management-System 1.0 contains a SQL injection vulnerability in the file /search.php , triggered by manipulation of the Contact argument. The flaw allows a remote, unauthenticated attacker to execute arbitrary SQL queries, resulting in low impact on confidentiality, integrity,...

CVE-2026-82914 kishan0725 Hospital-Management-System search.php sql injection

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

EUVD-2026-68807

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2026-82914 kishan0725 Hospital-Management-System search.php sql injection

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2026-82914: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

PT-2026-84033

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital-Management-System version 1.0 Description A security flaw allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application makes to its database. The issue exists in the...

CVE-2026-78112

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2026-78112 itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...