109 matches found
CVE-2026-11468: Improper Neutralization of Input During Web Page Generation
A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=roomtypes. Performing a manipulation of the argument room results in cross site scripting. The attack is possible to be carried out...
CVE-2026-11501: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=savepatient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack...
CVE-2026-11468
SourceCodester Hospitals Patient Records Management System 1.0 is affected by CVE-2026-11468. The issue arises from unknown processing of the file path /admin/?page=room_types, where manipulating the argument room triggers a cross-site scripting (XSS) vulnerability. Exploitation is possible remot...
CVE-2026-11468 SourceCodester Hospitals Patient Records Management System page room_types cross site scripting
A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=roomtypes. Performing a manipulation of the argument room results in cross site scripting. The attack is possible to be carried out...
CVE-2026-10185: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...
CVE-2026-10184: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This impacts an unknown function of the file /classes/Users.php?f=delete. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been...
CVE-2026-9564: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /admin/?page=patients/viewpatient. Performing a manipulation of the argument Remarks results in cross site scripting. Remote exploitation ...
CVE-2026-9355: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=savepatienthistory. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely...
CVE-2026-9356: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Hospitals Patient Records Management System 1.0. This affects an unknown function of the file /admin/patients/managehistory.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has...
PT-2026-42913
A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=save patient history. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely...
CVE-2026-9342
SourceCodester Hospitals Patient Records Management System 1.0 has a remote SQL injection in the file /admin/patients/view_history.php via manipulation of the ID argument. The flaw arises from unsanitized input, enabling a potential attacker to execute arbitrary SQL. Reported impacts include data...
CVE-2026-9342: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. Impacted is an unknown function of the file /admin/patients/viewhistory.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has be...
CVE-2025-41004
Imaster's Patient Records Management System is vulnerable to SQL Injection in the endpoint ‘/projects/hospital/admin/complaints.php’ through the ‘id’ parameter...
CVE-2025-41004: Improper Neutralization of Special Elements used in an SQL Command
Imaster's Patient Records Management System is vulnerable to SQL Injection in the endpoint ‘/projects/hospital/admin/complaints.php’ through the ‘id’ parameter...
PT-2026-2263
Name of the Vulnerable Software and Affected Versions Imaster Patient Records Management System affected versions not specified Description The Imaster Patient Records Management System is susceptible to a SQL Injection issue. This flaw is present in the /projects/hospital/admin/complaints.php AP...
EUVD-2022-53519
Malicious code in bioql PyPI...
EUVD-2022-53522
Malicious code in bioql PyPI...
EUVD-2022-27988
Malicious code in bioql PyPI...