Phpgurukul Hospital Management System vulnerabilities, page 4
69 vulnerabilities
Known vulnerabilities in Phpgurukul Hospital Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2024-46238phpgurukul · hospital_management_systemphpgurukul hospital_management_systemMultiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.phpEPSS0.30%MediumCVE-2024-10807anujkumar · hospital_management_system +1 morePHPGurukul Hospital Management System search.php cross site scriptingA vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the file hms/doctor/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.44%MediumCVE-2024-10806anujkumar · hospital_management_system +1 morePHPGurukul Hospital Management System betweendates-detailsreports.php cross site scriptingA vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulnerability affects unknown code of the file betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.44%HighCVE-2026-2134phpgurukul · hospital_management_systemPHPGurukul Hospital Management System manage-doctors.php sql injectionA security vulnerability has been detected in PHPGurukul Hospital Management System 4.0. The affected element is an unknown function of the file /hms/admin/manage-doctors.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.EPSS0.36%HighCVE-2026-2179phpgurukul · hospital_management_systemPHPGurukul Hospital Management System manage-users.php sql injectionA vulnerability was determined in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /admin/manage-users.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.EPSS0.36%HighCVE-2026-1550phpgurukul · hospital_management_systemPHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorizationA security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/hospital/docappsystem/adminviews.py of the component Admin Dashboard Page. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.EPSS0.40%CriticalCVE-2023-31498phpgurukul · hospital_management_systemphpgurukul hospital_management_systemA privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to execute arbitrary code and access sensitive information via the session token parameter.EPSS2.13%MediumCVE-2023-7173phpgurukul · hospital_management_systemPHPGurukul Hospital Management System registration.php cross site scriptingA vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249357 was assigned to this vulnerability.EPSS1.46%HighCVE-2023-7172phpgurukul · hospital_management_systemPHPGurukul Hospital Management System Admin Dashboard sql injectionA vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249356.EPSS1.46%