CveMateVulnerability intelligence

Hospital Management System Project vulnerabilities

43 vulnerabilities

Known vulnerabilities in Hospital Management System Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1

Hospital Management System43 vulnerabilities

CVE-2021-38755hospital_management_system_projecthospital_management_system5y ago16-08-2021 13:53

Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php.CVE-2021-38754hospital_management_system_projecthospital_management_system5y ago16-08-2021 13:53

SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php.CVE-2021-38756hospital_management_system_projecthospital_management_system5y ago16-08-2021 13:53

Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through prescribe.php.CVE-2021-38757hospital_management_system_projecthospital_management_system5y ago16-08-2021 13:53

Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through contact.php.CVE-2021-44095hospital_management_system_projecthospital_management_system4y ago31-05-2022 23:38

A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database.CVE-2022-26546hospital_management_system_projecthospital_management_system4y ago31-03-2022 20:18

Hospital Management System v1.0 was discovered to lack an authorization component, allowing attackers to access sensitive information and obtain the admin password.CVE-2022-48120hospital_management_system_projecthospital_management_system3y ago20-01-2023 00:00

SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd (on March 13, 2021), allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php.CVE-2022-25403hospital_management_system_projecthospital_management_system4y ago23-02-2022 21:11

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php.CVE-2022-25491hospital_management_system_projecthospital_management_system4y ago15-03-2022 17:38

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php.CVE-2022-25490hospital_management_system_projecthospital_management_system4y ago15-03-2022 17:40

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php.CVE-2022-25492hospital_management_system_projecthospital_management_system4y ago15-03-2022 17:37

HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php.CVE-2022-25409hospital_management_system_projecthospital_management_system4y ago28-02-2022 22:55

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the demail parameter at /admin-panel1.php.CVE-2022-25402hospital_management_system_projecthospital_management_system4y ago23-02-2022 21:11

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files.CVE-2022-25408hospital_management_system_projecthospital_management_system4y ago28-02-2022 22:55

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the dpassword parameter at /admin-panel1.php.CVE-2022-25407hospital_management_system_projecthospital_management_system4y ago28-02-2022 22:55

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Doctor parameter at /admin-panel1.php.CVE-2022-25493hospital_management_system_projecthospital_management_system4y ago15-03-2022 17:36

HMS v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via treatmentrecord.php.CVE-2022-27420hospital_management_system_projecthospital_management_system4y ago04-05-2022 02:23

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php.CVE-2022-27299hospital_management_system_projecthospital_management_system4y ago26-04-2022 13:40

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php.CVE-2022-27413hospital_management_system_projecthospital_management_system4y ago03-05-2022 20:24

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php.CVE-2022-46093hospital_management_system_projecthospital_management_system3y ago13-01-2023 00:00

Hospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator privileges without the need for a password.