Hospital Management System SQL Injection Vulnerability (CNVD-2026-32771)

Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the Admin Dashboard component. Attackers can...

Exploit for SQL Injection in Phpgurukul Hospital_Management_System

CVE-2023-7172 Overview This project contains a vulnerabl...

CVE-2023-7173

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

Cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2023-7173 PHPGurukul Hospital Management System registration.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2023-7173

CVE-2023-7173 affects PHPGurukul Hospital Management System 1.0, with a vulnerability in the registration.php file where the First Name/Fullname parameter can be manipulated to trigger a cross-site scripting attack. The issue allows remote initiation, and exploits have been disclosed publicly (VD...

CVE-2023-7172

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2023-7172

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

Sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2023-7172

CVE-2023-7172 describes a SQL Injection in PHPGurukul Hospital Management System 1.0, affecting the Admin Dashboard/Admin login page. Connected docs provide PoC payloads (e.g., username with a crafted input) and claim potential login bypass, confirming a network-exposed vulnerability. The initial...

CVE-2023-7172 PHPGurukul Hospital Management System Admin Dashboard sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

PT-2023-32919

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System version 1.0 Description A critical issue has been found in the Admin Dashboard component of the affected software, leading to sql injection. The attack can be launched remotely. The exploit has been...

PT-2023-32920 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 1.0 Description: A problematic vulnerability was found in the PHPGurukul Hospital Management System, affecting an unknown part of the file registration.php. The manipulation of the First Name...

PHPGurukul Hospital Management System SQL Injection Vulnerability

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A SQL injection vulnerability exists in PHPGurukul Hospital Management System version 1.0, which stems from the component Admin Dashboard that causes SQL injection...

CVE-2023-7173: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2023-7172: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2023-50035

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed...

Sql injection

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed...

CVE-2023-50035

CVE-2023-50035 affects PHPGurukul Small CRM 3.0. The issue is a SQL Injection in the Users login panel caused by directly using the password parameter in SQL queries without sanitization, enabling payload execution. The CVSSv3.1 base score is 9.8 (CRITICAL). Some connected sources (PT Security) d...

CVE-2023-50035: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed...