CVE-2023-41525

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...

PT-2025-32299 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection issue through the app contact parameter in the appsearch.php file. Recommendations: As a temporary workaround, consider...

CVE-2023-41531

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...

CVE-2023-41523

Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php...

PT-2025-32289 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createSessionTerm.php file. These flaws are present through the id, termId, and...

CVE-2023-41526

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters...

PT-2025-32297 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to multiple SQL injection flaws within the contact.php file. These flaws are triggered through the txtname, txtphone, and txtmail parameters...

PT-2025-32300 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple SQL injection vulnerabilities in the func3.php file. These vulnerabilities are present through the username1 and password2 parameters...

PT-2025-32301 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection due to the doctor contact parameter in the doctorsearch.php file. Recommendations: As a temporary workaround, consider...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of the parameters txtname, txtphone and txtmail in the file...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which is caused by a cross-site scripting attack due to incorrect manipulation of the parameters fname and lname in the file...

CVE-2023-41529

CVE-2023-41529 affects Hospital Management System v4, with multiple cross-site scripting (XSS) vulnerabilities in the file func2.php triggered by the fname and lname parameters. The issue is confirmed across multiple sources in the connected documents, and the CVSSv3.1 base score is 6.1 (Medium) ...

CVE-2023-41528

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters...

CVE-2023-41525

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...

CVE-2023-41527

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...

CVE-2023-41529

Hospital Management System v4 was discovered to contain multiple cross-site scripting XSS vulnerabilities in func2.php via the fname and lname parameters...

CVE-2023-41522

Student Attendance Management System v1 contains multiple SQL injection vulnerabilities in createStudents.php, exploitable via Id, firstname, and admissionNumber parameters due to improper input handling. CVSS v3.1 metrics indicate HIGH impact on confidentiality, integrity, and availability, with...

CVE-2023-41532

Hospital Management System v4 has a SQL injection vulnerability in the doctorsearch.php endpoint via the doctor_contact parameter. Affected component is the query construction in doctorsearch.php; root cause is lack of input sanitization. CVSS v3.1 base score 8.8 (HIGH) with network attack vector...

CVE-2023-41524

The CVE-2023-41524 entry concerns the Student Attendance Management System v1, which contains a SQL injection vulnerability in the username parameter of index.php. The root cause is improper handling of user-supplied input leading to unauthorized SQL execution. Impact is described as high severit...

CVE-2023-41520

CVE-2023-41520 affects Student Attendance Management System v1. The vulnerability lies in createClassArms.php, where SQL injection can be introduced via the parameters classId and classArmName. Affected component is the server-side PHP script responsible for managing class arms. The CVE metrics i...