CVE-2022-32340: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=patients/viewpatient&id=...

CVE-2022-32341: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=user/manageuser&id=...

CVE-2022-32343: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via hprms/admin/roomtypes/manageroomtype.php?id=...

CVE-2022-32346: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/rooms/viewroom.php?id=...

CVE-2022-32348: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deletedoctor...

CVE-2022-32350: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deleteroomtype...

PT-2022-21245

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "/hprms/admin/room types/view room type.php?id=" endpoint, where the id variable is vulnerable. There is no...

PT-2022-21250

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete room API endpoint. This allows for potential unauthorized access and manipulation ...

PT-2022-21240

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/hprms/admin/patients/manage patient.php" endpoint, specifically affecting the id parameter. This vulnerability allo...

PT-2022-21242

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/doctors/view doctor.php endpoint, specifically through the id parameter...

PT-2022-21248

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/rooms/manage room.php endpoint, specifically through the id parameter...

PT-2022-21246

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the hprms/admin/room types/manage room type.php endpoint, specifically through the id parameter. No...

PT-2022-21243

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue is related to SQL Injection via the /hprms/admin/?page=patients/view patient&id= endpoint. This allows for potential unauthorized access to patient records. No...

PT-2022-21241

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/doctors/manage doctor.php endpoint, specifically through the id parameter...

PT-2022-21249

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/rooms/view room.php endpoint, specifically through the id parameter. Recommendation...

PT-2022-21244

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/?page=user/manage user&id= endpoint. The id variable is vulnerable to SQL injection...

PT-2022-21255

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete patient admission API endpoint. This allows for potential unauthorized access and...

PT-2022-21251

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete doctor endpoint. This allows for potential unauthorized access and manipulation of...

PT-2022-21253

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete room type API endpoint. This allows for potential unauthorized access and...

CVE-2022-32342: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/roomtypes/viewroomtype.php?id=...