CVE-2023-40992

Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter...

CVE-2023-41527

Hospital Management System v4 , developed by Kishan Lal, contains a SQL injection vulnerability. The flaw exists in the func.php file due to the incorrect manipulation of the password2 parameter, which allows for potential unauthorized database access or modification. Remediation involves sanitiz...

CVE-2023-41524

Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of parameters username3 and password3 in file func1.php...

CVE-2023-41519

The Student Attendance Management System v1 is vulnerable to a cross-site scripting (XSS) attack due to improper neutralization of input during web page generation. The flaw exists in the createSessionTerm.php file, specifically when the sessionName parameter is processed without sufficient sanit...

CVE-2023-41519

Student Attendance Management System v1 was discovered to contain a cross-site scripting XSS vulnerability via the sessionName parameter at createSessionTerm.php...

CVE-2023-41530

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...

CVE-2023-41522

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...

PT-2025-32290 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createStudents.php file. The Id, firstname, and admissionNumber parameters are...

CVE-2023-41522

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...

CVE-2023-41531

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...

CVE-2023-41529

Hospital Management System v4 was discovered to contain multiple cross-site scripting XSS vulnerabilities in func2.php via the fname and lname parameters...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of parameters username1 and password2 in file func3.php...

CVE-2023-41524

Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...

CVE-2023-41527

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...

CVE-2023-41526

The Hospital Management System v4 , developed by Kishan Lal, is vulnerable to multiple SQL injection flaws in the func1.php file. The root cause is the incorrect manipulation and lack of proper sanitization for the username3 and password3 parameters. These vulnerabilities could allow an attacker ...

CVE-2023-41528

Hospital Management System v4 is vulnerable to multiple SQL injection flaws located in the contact.php file. The root cause is the incorrect manipulation and lack of proper validation of the txtname, txtphone, and txtmail parameters. An attacker could potentially exploit these vulnerabilities to ...

PT-2025-32295 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple SQL injection flaws within the func1.php file. These flaws are present through the username3 and password3 parameters. Recommendations: Apply...

CVE-2023-41523

The Student Attendance Management System v1 is susceptible to a SQL injection vulnerability. The root cause is the incorrect manipulation of the emailAddress parameter within the createClassTeacher.php file. Exploitation of this flaw could allow unauthorized database interaction. To mitigate this...

CVE-2023-41531

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...