Projectworlds Hospital Management System In Php vulnerabilities

7 vulnerabilities

Known vulnerabilities in Projectworlds Hospital Management System In Php, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2021-43628projectworlds · hospital_management_system_in_phpprojectworlds hospital_management_system_in_phpProjectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php.EPSS1.17%8.8HighCVE-2021-43630projectworlds · hospital_management_system_in_phpprojectworlds hospital_management_system_in_phpProjectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web server.EPSS2.07%9.8CriticalCVE-2021-43629projectworlds · hospital_management_system_in_phpprojectworlds hospital_management_system_in_phpProjectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php.EPSS1.17%9.8CriticalCVE-2021-43631projectworlds · hospital_management_system_in_phpprojectworlds hospital_management_system_in_phpProjectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php.EPSS1.17%5.3MediumCVE-2021-45852projectworlds · hospital_management_system_in_phpprojectworlds hospital_management_system_in_phpAn issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via add_patient.php.EPSS0.68%9.8CriticalCVE-2023-5004hospital-management-system +1 moreHospital-management-system-in-php 378c157 - Blind SQL InjectionHospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI.EPSS1.09%9.8CriticalCVE-2023-5053hospital-management-system +1 moreSQL Injection in hospital-management-system-in-php 378c157 in index.phpHospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI.EPSS1.09%