Hospital Management System Project Hospital Management System vulnerabilities
43 vulnerabilities
Known vulnerabilities in Hospital Management System Project Hospital Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-38755hospital_management_system_projecthospital_management_system
EPSS score0.98%
Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php.CVE-2021-38754hospital_management_system_projecthospital_management_systemEPSS score1.78%
SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php.CVE-2021-38756hospital_management_system_projecthospital_management_systemEPSS score0.72%
Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through prescribe.php.CVE-2021-38757hospital_management_system_projecthospital_management_systemEPSS score0.88%
Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through contact.php.CVE-2021-44095hospital_management_system_projecthospital_management_systemEPSS score2.21%
A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database.CVE-2022-26546hospital_management_system_projecthospital_management_systemEPSS score1.41%
Hospital Management System v1.0 was discovered to lack an authorization component, allowing attackers to access sensitive information and obtain the admin password.CVE-2022-48120hospital_management_system_projecthospital_management_systemEPSS score0.87%
SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd (on March 13, 2021), allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php.CVE-2022-25403hospital_management_system_projecthospital_management_systemEPSS score1.57%
HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php.CVE-2022-25491hospital_management_system_projecthospital_management_systemEPSS score1.50%
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php.CVE-2022-25490hospital_management_system_projecthospital_management_systemEPSS score1.61%
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php.CVE-2022-25492hospital_management_system_projecthospital_management_systemEPSS score1.61%
HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php.CVE-2022-25409hospital_management_system_projecthospital_management_systemEPSS score0.49%
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the demail parameter at /admin-panel1.php.CVE-2022-25402hospital_management_system_projecthospital_management_systemEPSS score1.61%
An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files.CVE-2022-25408hospital_management_system_projecthospital_management_systemEPSS score0.49%
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the dpassword parameter at /admin-panel1.php.CVE-2022-25407hospital_management_system_projecthospital_management_systemEPSS score0.49%
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Doctor parameter at /admin-panel1.php.CVE-2022-25493hospital_management_system_projecthospital_management_systemEPSS score0.80%
HMS v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via treatmentrecord.php.CVE-2022-27420hospital_management_system_projecthospital_management_systemEPSS score1.44%
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php.CVE-2022-27299hospital_management_system_projecthospital_management_systemEPSS score1.57%
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php.CVE-2022-27413hospital_management_system_projecthospital_management_systemEPSS score2.96%
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php.CVE-2022-46093hospital_management_system_projecthospital_management_systemEPSS score0.67%
Hospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator privileges without the need for a password.