Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of parameters username1 and password2 in file func3.php...

CVE-2023-41526

CVE-2023-41526 affects Hospital Management System v4, with multiple SQL injection flaws in func1.php exposed via username3 and password3 parameters. Root cause: improper handling of user-supplied input leading to unauthenticated data access? and high risk per CVSS 3.1 metrics (CRITICAL, 9.8). Aff...

CVE-2023-41528

CVE-2023-41528 concerns Hospital Management System v4, where the component in question is the file/endpoint responsible for contact handling. The vulnerability is described as multiple SQL injection flaws in contact.php triggered by the parameters txtname, txtphone, and txtmail. According to the ...

CVE-2023-41527

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...

CVE-2023-41529

Hospital Management System v4 was discovered to contain multiple cross-site scripting XSS vulnerabilities in func2.php via the fname and lname parameters...

PT-2025-32295 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple SQL injection flaws within the func1.php file. These flaws are present through the username3 and password3 parameters. Recommendations: Apply...

CVE-2023-41524

Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...

CVE-2023-41530

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...

CVE-2023-41519

Student Attendance Management System v1 was discovered to contain a cross-site scripting XSS vulnerability via the sessionName parameter at createSessionTerm.php...

CVE-2023-41522

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...

CVE-2023-41527

CVE-2023-41527 affects Hospital Management System v4 and is a SQL injection vulnerability in the password2 parameter of func.php. The issue arises from improper handling of user-supplied input, enabling attackers to manipulate SQL queries and potentially access or modify the database. Exploitatio...

CVE-2023-41524

Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...

CVE-2023-41531

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...

PT-2025-32290 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createStudents.php file. The Id, firstname, and admissionNumber parameters are...

CVE-2023-41522

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...

CVE-2023-41523

The CVE-2023-41523 entry maps to the Student Attendance Management System v1, which contains a SQL injection in the createClassTeacher.php endpoint that reads the emailAddress parameter. The vulnerability is described as an injection flaw that can affect the application’s database queries; CVSSv3...

CVE-2023-41519

The CVE-2023-41519 affects Student Attendance Management System v1. The vulnerability is a cross-site scripting (XSS) flaw in the createSessionTerm.php script, exploitable via the sessionName parameter. This can allow injection of malicious scripts when a user submits a crafted sessionName, poten...

PT-2025-32286 · Unknown · Hospital Management System Version 4

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: Hospital Management System version 4 is susceptible to a SQL injection due to insufficient input validation. The vulnerability exists in the /Hospital-Management-System-master/func.php file...

CVE-2023-41521

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters...

CVE-2023-41531

CVE-2023-41531 affects Hospital Management System v4, with multiple SQL injection flaws in the vulnerable file func3.php, exploitable via the parameters username1 and password2. The issue enables unauthenticated or basic-privilege users to manipulate queries, consistent with a CVSS3.1 base score ...