21 matches found
CVE-2026-19069 itsourcecode Hospital Management System treatmentrecord.php sql injection
A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...
CVE-2026-19069: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...
PT-2026-68675
Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A remote SQL injection is possible via the /treatmentrecord.php endpoint. The issue occurs when the editid argument is manipulated, allowing an attacker to execute arbitrary SQL...
EUVD-2022-30162
Malicious code in bioql PyPI...
PT-2022-20115
Name of the Vulnerable Software and Affected Versions Hospital Management System in PHP with Source Code HMS version 1.0 Description The issue is related to a File upload vulnerability found in the treatmentrecord.php file. This vulnerability could potentially allow unauthorized file uploads...
CVE-2022-30448: Unrestricted Upload of File with Dangerous Type
Hospital Management System in PHP with Source Code HMS 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php...
CVE-2022-24136
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
Design/Logic Flaw
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
CVE-2022-24136
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
CVE-2022-24136
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
CVE-2022-24136
CVE-2022-24136 affects Hospital Management System v1.0 and involves an unrestricted file upload in treatmentrecord.php . An attacker can upload a PHP file and remotely execute code, enabling arbitrary code execution. Multiple connected sources (CNVD-2022-81375, NVD, Red Hat, CNVD variants) corrob...
PT-2022-16487
Name of the Vulnerable Software and Affected Versions Hospital Management System version 1.0 Description The issue concerns an unrestricted upload of dangerous file types in the treatmentrecord.php file. An attacker can exploit this by uploading any PHP file and then executing it. Recommendations...
CVE-2022-24136: Unrestricted Upload of File with Dangerous Type
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...
CVE-2022-25493
HMS v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via treatmentrecord.php...
CVE-2022-25493
HMS v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via treatmentrecord.php...
Cross site scripting
HMS v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via treatmentrecord.php...
CVE-2022-25493
HMS v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via treatmentrecord.php...
CVE-2022-25493
HMS v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via treatmentrecord.php...
PT-2022-17329
Name of the Vulnerable Software and Affected Versions HMS version 1.0 Description A reflected cross-site scripting XSS issue was found in HMS via the treatmentrecord.php file. This allows an attacker to inject malicious scripts into the website, potentially leading to unauthorized access or data...
HMS 跨站脚本漏洞
HMS is a computer or web based hospital management system in Bangladesh. Useful for managing the operations of a hospital or any healthcare facility.HMS version 1.0 has a cross-site scripting vulnerability that can be exploited by attackers to cause a reflected cross-site scripting XSS...