CVE-2023-43909

2023-09-2900:00:00

mitre

github.com

hospital management system

sql injection

vulnerability

appsearch.php

AI Score

8.3

Confidence

High

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:hospital_management_system:hospital_management_system:*:*:*:*:*:*:*:*"
    ],
    "vendor": "hospital_management_system",
    "product": "hospital_management_system",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "4770d"
      }
    ],
    "defaultStatus": "unknown"
  }
]