Lucene search
+L

35 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/20 12:00 a.m.•9 views

CVE-2023-4441: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /patient/appointment.php. The manipulation of the argument sheduledate leads to sql injection. The attack can ...

9.8CVSS6.6AI score0.00541EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/20 12:00 a.m.•5 views

CVE-2023-4440: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been classified as critical. This affects an unknown part of the file appointment.php. The manipulation of the argument sheduledate leads to sql injection. It is possible to initiate the...

9.8CVSS6.6AI score0.00674EPSS
SaveExploits0References2
NVD
NVD
•added 2023/08/06 9:15 a.m.•34 views

CVE-2023-4181

A vulnerability, which was classified as critical, has been found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this issue is some unknown functionality of the file /vm/admin/delete-doctor.php?id=2 of the component Redirect Handler. The manipulation leads ...

9.8CVSS6.6AI score0.01096EPSS
SaveExploits1References3
NVD
NVD
•added 2023/08/06 8:15 a.m.•32 views

CVE-2023-4179

A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected is an unknown function of the file /vm/doctor/doctors.php?action=view. The manipulation of the argument id leads to sql injection. It is possible to launch the...

9.8CVSS7.5AI score0.00827EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/08/06 7:31 a.m.•44 views

CVE-2023-4179 SourceCodester Free Hospital Management System for Small Practices sql injection

A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected is an unknown function of the file /vm/doctor/doctors.php?action=view. The manipulation of the argument id leads to sql injection. It is possible to launch the...

6.5CVSS10AI score0.00827EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/08/06 12:00 a.m.•27 views

PT-2023-28106 · Sourcecodester · Sourcecodester Free Hospital Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free Hospital Management System for Small Practices version 1.0 Description: A critical issue has been found in the SourceCodester Free Hospital Management System for Small Practices, affecting some unknown functionality of the...

9.8CVSS5.7AI score0.01096EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/08/06 12:00 a.m.•27 views

PT-2023-28092 · Unknown · Sourcecodester Free Hospital Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free Hospital Management System for Small Practices version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /vm/doctor/doctors.php?action=view. The manipulation of the id argumen...

9.8CVSS6.5AI score0.00827EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/06 12:00 a.m.•5 views

CVE-2023-4180: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file /vm/login.php. The manipulation of the argument useremail/userpassword leads to sql injection. The...

9.8CVSS7.1AI score0.00937EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/06 12:00 a.m.•6 views

CVE-2023-4181: Improper Enforcement of Behavioral Workflow

A vulnerability, which was classified as critical, has been found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this issue is some unknown functionality of the file /vm/admin/delete-doctor.php?id=2 of the component Redirect Handler. The manipulation leads ...

9.8CVSS5.9AI score0.01096EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/06 12:00 a.m.•6 views

CVE-2023-4179: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected is an unknown function of the file /vm/doctor/doctors.php?action=view. The manipulation of the argument id leads to sql injection. It is possible to launch the...

9.8CVSS6.6AI score0.00827EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/08/06 12:00 a.m.•19 views

Hospital Management System Security Vulnerability

A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A security vulnerability exists in SourceCodester Free Hospital Management System for Small Practices version 1.0, which stems from...

9.8CVSS6.7AI score0.01096EPSS
SaveExploits1References4
OSV
OSV
•added 2022/01/18 6:15 p.m.•19 views

CVE-2021-46013

An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can leverage this vulnerability to enable remote code execution on the affected web server. Once a php webshell containing "" gets uploaded it is saved into /uploads/examquestion/...

9.8CVSS6.3AI score0.03469EPSS
SaveExploits1References1
Prion
Prion
•added 2022/01/18 6:15 p.m.•24 views

Unrestricted file upload

An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can leverage this vulnerability to enable remote code execution on the affected web server. Once a php webshell containing "" gets uploaded it is saved into /uploads/examquestion/...

7.5CVSS9.6AI score0.03469EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/18 12:00 a.m.•12 views

CVE-2021-46013: Unrestricted Upload of File with Dangerous Type

An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can leverage this vulnerability to enable remote code execution on the affected web server. Once a php webshell containing " " gets uploaded it is saved into /uploads/examquestion/...

9.8CVSS6.3AI score0.03469EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/18 12:00 a.m.•9 views

PT-2022-12504

Name of the Vulnerable Software and Affected Versions Sourcecodester Free school management software version 1.0 Description An unrestricted file upload issue exists, allowing an attacker to enable remote code execution on the affected web server. This can be achieved by uploading a PHP webshell...

9.8CVSS0.03469EPSS
SaveExploits1References3
Rows per page
Query Builder