CVE-2021-38757

Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through contact.php.

CVE-2021-38754

SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php.

CVE-2021-38756

Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through prescribe.php.

CVE-2021-38755

Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php.

CVE-2023-43909

Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php.