33 matches found
CVE-2024-46237
PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS via the patname, pataddress, and medhis parameters in doctor/add-patient.php and doctor/edit-patient.php...
Sql injection
A vulnerability was found in Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file patient.php. The manipulation of the argument address leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...
CVE-2023-3809 Hospital Management System patient.php sql injection
A vulnerability was found in Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file patient.php. The manipulation of the argument address leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...
PT-2023-26297 · Unknown · Hospital Management System
Name of the Vulnerable Software and Affected Versions: Hospital Management System version 1.0 Description: A critical issue has been found in the Hospital Management System, affecting the file patient.php. The manipulation of the address argument leads to sql injection, allowing remote attacks. T...
CVE-2022-42206
PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...
CVE-2022-42205
PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via add-patient.php...
CVE-2022-42205
PHPGurukul Hospital Management System (PHP, v4.0) has an XSS vulnerability in add-patient.php due to insufficient input validation/encoding. An attacker can inject JavaScript via user-supplied fields, potentially compromising other users (including admins) and their sessions. No official patch/ve...
PT-2022-26311 · Unknown · Phpgurukul Hospital Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns a Cross Site Scripting XSS flaw. This type of flaw occurs when an application includes user input in its output without proper validation or encoding, allowing ...
CVE-2022-42206
PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...
CVE-2022-42205
PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via add-patient.php...
CVE-2021-30030
Cross Site Scripting XSS in Remote Clinic v2.0 via the Full Name field on register-patient.php...
Cross site scripting
Cross Site Scripting XSS in Remote Clinic v2.0 via the Full Name field on register-patient.php...
CVE-2021-30030
CVE-2021-30030 affects Remote Clinic v2.0. The vulnerability is a Cross-Site Scripting (XSS) in the Full Name field of register-patient.php, demonstrated as stored XSS (examples use payloads like XSS">