CVE-2025-15034

A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

Code-Projects Patient Record Management System 注入漏洞

Code-Projects Patient Record Management System is a Code-Projects open source patient record management system. Code-Projects Patient Record Management System version 1.0 suffers from an injection vulnerability, which stems from an incorrect manipulation of the parameter itrno in the file...

Medical Certificate Generator App SQL注入漏洞

The Medical Certificate Generator App is a simple web application for medical clinics. A SQL injection vulnerability exists in the Medical Certificate Generator App, which stems from the id parameter of some of the methods on the managerecord.php page that can lead to SQL injection...

CVE-2022-30448

Hospital Management System in PHP with Source Code HMS 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php...

CVE-2021-37213: Use of Incorrectly-Resolved Name or Reference

The check-in record page of Flygo contains Insecure Direct Object Reference IDOR vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID and date in specific parameters to access particular employee’s check-in record...