55 matches found
CVE-2023-1056: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edoc/doctor/patient.php. The manipulation of the argument search12 leads to sql injection. The attack can be launch...
CVE-2021-35387: Improper Neutralization of Special Elements used in an SQL Command
Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php...
CVE-2022-42206
PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...
CVE-2022-42205
PHPGurukul Hospital Management System (PHP, v4.0) has an XSS vulnerability in add-patient.php due to insufficient input validation/encoding. An attacker can inject JavaScript via user-supplied fields, potentially compromising other users (including admins) and their sessions. No official patch/ve...
CVE-2022-42205
PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via add-patient.php...
PT-2022-26311 · Unknown · Phpgurukul Hospital Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns a Cross Site Scripting XSS flaw. This type of flaw occurs when an application includes user input in its output without proper validation or encoding, allowing ...
CVE-2022-42206: Improper Neutralization of Input During Web Page Generation
PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...
CVE-2022-42205
PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via add-patient.php...
CVE-2022-42206
PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...
CVE-2022-42205: Improper Neutralization of Input During Web Page Generation
PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via add-patient.php...
CVE-2021-39416: Improper Neutralization of Input During Web Page Generation
Multiple Cross Site Scripting XSS vulnerabilities exists in Remote Clinic v2.0 in 1 patients/register-patient.php via the a Contact, b Email, c Weight, d Profession, e refcontact, f address, g gender, h age, and i serial parameters; in 2 patients/edit-patient.php via the a Contact, b Email, c...
CVE-2021-30030
Cross Site Scripting XSS in Remote Clinic v2.0 via the Full Name field on register-patient.php...
Cross site scripting
Cross Site Scripting XSS in Remote Clinic v2.0 via the Full Name field on register-patient.php...
CVE-2021-30030
CVE-2021-30030 affects Remote Clinic v2.0. The vulnerability is a Cross-Site Scripting (XSS) in the Full Name field of register-patient.php, demonstrated as stored XSS (examples use payloads like XSS">