14 matches found
CVE-2025-63497
The patient prescription viewing functionality in hisdocviewsinglepatient.php of rickxy Hospital Management System version 1.0 contains an SQL injection vulnerability. The patnumber GET parameter is directly concatenated into SQL queries without proper sanitization, allowing authenticated attacke...
CVE-2025-63497
The rickxy Hospital Management System version 1.0 contains an SQL injection vulnerability in the patient prescription viewing functionality within the his_doc_view_single_patient.php file. The root cause is the direct concatenation of the pat_number GET parameter into SQL queries without proper s...
CVE-2022-46499
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisadminviewsinglepatient.php...
CVE-2022-46497
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisdocviewsinglepatien.php...
CVE-2022-46499
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisadminviewsinglepatient.php...
CVE-2022-46497
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisdocviewsinglepatien.php...
Sql injection
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisdocviewsinglepatien.php...
Sql injection
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisadminviewsinglepatient.php...
Hospital Management System Security Vulnerability
The Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A security vulnerability exists in Hospital Management System version 1.0 that stems from an SQL injection vulnerability contained...
CVE-2022-46499
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisadminviewsinglepatient.php...
CVE-2022-46497
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisdocviewsinglepatien.php...
CVE-2022-46497
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisdocviewsinglepatien.php...
CVE-2022-46499
Hospital Management System version 1.0 is vulnerable to a SQL injection flaw caused by improper neutralization of special elements in the pat_number parameter at the his_admin_view_single_patient.php (or his_admin_view_single_patent.php) endpoint. This vulnerability could allow an attacker to exe...