Phpgurukul Hospital Management System vulnerabilities, page 3
69 vulnerabilities
Known vulnerabilities in Phpgurukul Hospital Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2022-42205phpgurukul · hospital_management_systemphpgurukul hospital_management_systemPHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via add-patient.php.EPSS0.54%HighCVE-2022-46499phpgurukul · hospital_management_systemphpgurukul hospital_management_systemHospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php.EPSS0.55%HighCVE-2022-46497phpgurukul · hospital_management_systemphpgurukul hospital_management_systemHospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_doc_view_single_patien.php.EPSS0.50%LowCVE-2022-46498phpgurukul · hospital_management_systemphpgurukul hospital_management_systemHospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the doc_number parameter at his_admin_view_single_employee.php.EPSS0.44%HighCVE-2022-24226phpgurukul · hospital_management_systemphpgurukul hospital_management_systemHospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php.EPSS1.74%CriticalCVE-2022-24263phpgurukul · hospital_management_systemphpgurukul hospital_management_systemHospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter.EPSS8.24%HighCVE-2022-24646phpgurukul · hospital_management_systemphpgurukul hospital_management_systemHospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/contact.php via the txtMsg parameters.EPSS1.72%CriticalCVE-2024-51360phpgurukul · hospital_management_systemphpgurukul hospital_management_systemAn issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute arbitrary code via the hms/doctor/edit-profile.php fileEPSS0.99%MediumCVE-2024-11675codeastro · hospital management system +1 moreCodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scriptingA vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /backend/admin/his_admin_register_patient.php of the component Add Patient Details Page. The manipulation of the argument pat_fname/pat_ailment/pat_lname/pat_age/pat_dob/pat_number/pat_phone/pat_type/pat_addr leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.48%CriticalCVE-2024-0363phpgurukul · hospital_management_systemPHPGurukul Hospital Management System patient-search.php sql injectionA vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250130 is the identifier assigned to this vulnerability.EPSS0.65%CriticalCVE-2024-0360phpgurukul · hospital_management_systemPHPGurukul Hospital Management System edit-doctor-specialization.php sql injectionA vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/edit-doctor-specialization.php. The manipulation of the argument doctorspecilization leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250127.EPSS0.70%CriticalCVE-2024-0364phpgurukul · hospital_management_systemPHPGurukul Hospital Management System query-details.php sql injectionA vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file admin/query-details.php. The manipulation of the argument adminremark leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250131.EPSS0.53%CriticalCVE-2024-0361phpgurukul · hospital_management_systemPHPGurukul Hospital Management System contact.php sql injectionA vulnerability classified as critical has been found in PHPGurukul Hospital Management System 1.0. Affected is an unknown function of the file admin/contact.php. The manipulation of the argument mobnum leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250128.EPSS0.70%MediumCVE-2024-0286phpgurukul · hospital_management_systemPHPGurukul Hospital Management System Contact Form index.php#contact_us cross site scriptingA vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file index.php#contact_us of the component Contact Form. The manipulation of the argument Name/Email/Message leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249843.EPSS0.88%CriticalCVE-2024-0362phpgurukul · hospital_management_systemPHPGurukul Hospital Management System change-password.php sql injectionA vulnerability classified as critical was found in PHPGurukul Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/change-password.php. The manipulation of the argument cpass leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-250129 was assigned to this vulnerability.EPSS0.65%MediumCVE-2024-56997phpgurukul · hospital_management_systemphpgurukul hospital_management_systemPHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /doctor/index.php via the 'Email' parameter.EPSS0.20%MediumCVE-2024-56990phpgurukul · hospital_management_systemphpgurukul hospital_management_systemPHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /view-medhistory.php and /admin/view-patient.php.EPSS0.40%MediumCVE-2024-56998phpgurukul · hospital_management_systemphpgurukul hospital_management_systemPHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /edit-profile.php via the parameter $address.EPSS0.20%MediumCVE-2024-46237phpgurukul · hospital_management_systemphpgurukul hospital_management_systemPHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and medhis parameters in doctor/add-patient.php and doctor/edit-patient.php.EPSS0.32%MediumCVE-2024-46239phpgurukul · hospital_management_systemphpgurukul hospital_management_systemMultiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php.EPSS0.30%