SourceCodester Clinics Patient Management System SQL注入漏洞

SourceCodester Clinics Patient Management System is a clinic patient management system from SourceCodester. SourceCodester Clinics Patient Management System version 1.0 has a SQL injection vulnerability that originates in the patientname function of the patients.php file, which can lead to SQL...

CVE-2024-6969

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/getpatienthistory.php. The manipulation of the argument patientid leads to sql injection. The attack may be initiated...

CVE-2024-6969 SourceCodester Clinics Patient Management System get_patient_history.php sql injection

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/getpatienthistory.php. The manipulation of the argument patientid leads to sql injection. The attack may be initiated...

CVE-2024-6969 SourceCodester Clinics Patient Management System get_patient_history.php sql injection

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/getpatienthistory.php. The manipulation of the argument patientid leads to sql injection. The attack may be initiated...

CVE-2024-6969

CVE-2024-6969 concerns SourceCodester Clinics Patient Management System 1.0. The issue is a SQL injection in an endpoint handling /ajax/get_patient_history.php, triggered by manipulating the patient_id parameter. This can be exploited remotely and is described as a critical vulnerability with pub...

CVE-2024-6968

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /printpatientsvisits.php. The manipulation of the argument from/to leads to sql injection. The attack can be initiated remotely...

CVE-2024-6968 SourceCodester Clinics Patient Management System print_patients_visits.php sql injection

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /printpatientsvisits.php. The manipulation of the argument from/to leads to sql injection. The attack can be initiated remotely...

CVE-2024-6968

The CVE-2024-6968 entry affects SourceCodester Clinics Patient Management System 1.0, with the vulnerability residing in the /print_patients_visits.php file. The issue allows SQL injection via manipulation of the from/to argument and can be exploited remotely; the exploit has been disclosed publi...

PT-2024-38008 · Sourcecodester · Sourcecodester Clinics Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System version 1.0 Description: A critical issue affects the processing of the file /ajax/get patient history.php, where the manipulation of the patient id argument leads to sql injection. The attack...

PT-2024-38007 · Sourcecodester · Sourcecodester Clinics Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System version 1.0 Description: A critical issue has been discovered, affecting the /print patients visits.php file. The from/to argument is vulnerable to SQL injection, which can be exploited remotel...

PT-2024-38477 · Sourcecodester · Sourcecodester Clinics Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System version 1.0 Description: A vulnerability was found in the User Page component, specifically in the file users.php, which can lead to cross-site request forgery. The attack can be initiated...

CVE-2023-1035

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as critical. Affected is an unknown function of the file updateuser.php. The manipulation of the argument userid leads to sql injection. It is possible to launch the attack remotely. The...

PT-2023-16706 · Sourcecodester · Sourcecodester Clinics Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file update user.php. The manipulation of the user id argument leads to sql injectio...

CVE-2022-3122

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file medicinedetails.php. The manipulation of the argument medicine leads to sql injection. The attack may be launched...

Sql injection

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file medicinedetails.php. The manipulation of the argument medicine leads to sql injection. The attack may be launched...

CVE-2022-3120

A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be launch...

Sql injection

A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be launch...

CVE-2022-3120 SourceCodester Clinics Patient Management System Login index.php sql injection

A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be launch...

CVE-2022-2297

A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/updateuser.php?userid=1. The manipulation of the argument profilepicture with the input leads to unrestricted upload. It is possib...

Design/Logic Flaw

A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/updateuser.php?userid=1. The manipulation of the argument profilepicture with the input leads to unrestricted upload. It is possib...